CVE-2006-4416: IBM Aix

High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days.

Untrusted search path vulnerability in the mkvg command in IBM AIX 5.2 and 5.3 allows local users to gain privileges by modifying the path to point to a malicious (1) chdev, (2) mkboot, (3) varyonvg, or (4) varyoffvg program.

Affected products

• IBM Aix: version 5.1 only; version 5.2 only; version 5.3 only

Published 2006-08-28. Last modified 2026-06-16.