EUVD-2005-0241

Malware in sbrugna...

CVE-2006-4416: Undefined Security Weakness

Untrusted search path vulnerability in the mkvg command in IBM AIX 5.2 and 5.3 allows local users to gain privileges by modifying the path to point to a malicious 1 chdev, 2 mkboot, 3 varyonvg, or 4 varyoffvg program...

CVE-2005-0240

Format string vulnerability in chdev on IBM AIX 5.2 allows local users to execute arbitrary code via format string specifiers in a command line argument, which is not properly handled when printing an error message...

iDEFENSE Security Advisory 02.07.05: IBM AIX chdev Local Format String Vulnerability

IBM AIX chdev Local Format String Vulnerability iDEFENSE Security Advisory 02.07.05 http://www.idefense.com/application/poi/display?type=vulnerabilities February 07, 2005 I. BACKGROUND The chdev program is a setuid root application, installed by default under multiple versions of IBM AIX, that...

CVE-2005-0240

CVE-2005-0240: Format string vulnerability in chdev on IBM AIX 5.2 permits local users to execute arbitrary code via format string specifiers in a command-line argument during error message printing. Affected component: chdev on AIX 5.2. Root cause: improper handling of format strings when printi...

CVE-2005-0240: Undefined Security Weakness

Format string vulnerability in chdev on IBM AIX 5.2 allows local users to execute arbitrary code via format string specifiers in a command line argument, which is not properly handled when printing an error message...