CVE-2011-4141 Untrusted search path vulnerability in EMC RSA SecurID Software Token 4.1 before 4.1.1 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by...
HighCVSS 9.3
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Untrusted search path vulnerability in EMC RSA SecurID Software Token 4.1 before 4.1.1 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a Software Token file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rsa securid | = 4.1 | No fix listed |
| rsa securid | = 4.1.0.545 | No fix listed |
References
- 20111214 ESA-2011-039: RSA(r), The Security Division of EMC, announces security fixes and improvements for RSASecurID(r) Software Token 4.1 for Microsoft(r)Windows(r) mailing-list
- 45665 third-party-advisory vendor-advisory
- 1026426 vdb-entry
- securid-dll-code-execution(71833) vdb-entry