CVE-2010-3158 Untrusted search path vulnerability in Lhaplus before 1.58 allows local users to gain privileges via a Trojan horse executable file in the current working directory.
MediumCVSS 6.9
EPSS 0.29%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Untrusted search path vulnerability in Lhaplus before 1.58 allows local users to gain privileges via a Trojan horse executable file in the current working directory.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lhaplus | <= 1.57 | No fix listed |
| lhaplus | = 1.52 | No fix listed |
| lhaplus | = 1.53 | No fix listed |
| lhaplus | = 1.55 | No fix listed |
| lhaplus | = 1.56 | No fix listed |
References
- JVN#18774708 third-party-advisory
- JVNDB-2010-000039 third-party-advisory
- 41742 third-party-advisory vendor-advisory
- www7a.biglobe.ne.jp
- lhaplus-untrusted-priv-escalation(64436) vdb-entry