CVE-2006-5010

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-09-27 · updated 2026-06-16

Description

Untrusted search path vulnerability in acctctl in IBM AIX 5.3.0 allows local users to execute arbitrary commands by modifying the path to point to a malicious mkdir program.

Affected products

IBM AIX: 5.3.0

References

http://secunia.com/advisories/22213
http://securitytracker.com/id?1016965
http://www-1.ibm.com/support/docview.wss?uid=isg1IY88681
http://www.vupen.com/english/advisories/2006/3770
http://www.vupen.com/english/advisories/2006/3871
https://exchange.xforce.ibmcloud.com/vulnerabilities/29163
http://secunia.com/advisories/22213
http://securitytracker.com/id?1016965
http://www-1.ibm.com/support/docview.wss?uid=isg1IY88681
http://www.vupen.com/english/advisories/2006/3770

Get alerted when CVE-2006-5010 or the next vulnerability affects your stack