Vulnerability Database

310,057

Total vulnerabilities in the database

CVE-2006-2647

Untrusted search path vulnerability in update_flash for IBM AIX 5.1, 5.2 and 5.3 allows local users to execute arbitrary commands via unknown vectors involving lsmcode and possibly other commands.

  • Published: May 30, 2006
  • Updated: Nov 9, 2025
  • CVE: CVE-2006-2647
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 7.2
  • AV:L/AC:L/Au:N/C:C/I:C/A:C

No CWE or OWASP classifications available.

Software From Fixed in
ibm / aix 5.3 5.3.x
ibm / aix 5.2 5.2.x
ibm / aix 5.1 5.1.x