CVE-2006-2647 : Untrusted search path vulnerability in update

Untrusted search path vulnerability in update_flash for IBM AIX 5.1, 5.2 and 5.3 allows local users to execute arbitrary commands via unknown vectors involving lsmcode and possibly other commands.

Published 2006-05-30 10:02:00

Updated 2025-04-03 01:03:51

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2006-2647

IBM » AIX » Version: 5.1
cpe:2.3:o:ibm:aix:5.1:*:*:*:*:*:*:*
Matching versions
IBM » AIX » Version: 5.2
cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*
Matching versions
IBM » AIX » Version: 5.3
cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2006-2647

EPSS FAQ

0.05%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 13 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2006-2647

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
7.2	HIGH	AV:L/AC:L/Au:N/C:C/I:C/A:C	3.9	10.0	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete

References for CVE-2006-2647

Jump to

Vulnerability Details : CVE-2006-2647

Products affected by CVE-2006-2647

Exploit prediction scoring system (EPSS) score for CVE-2006-2647

CVSS scores for CVE-2006-2647

References for CVE-2006-2647