CVE-2012-0315 Untrusted search path vulnerability in ALFTP before 5.31 allows local users to gain privileges via a Trojan horse executable file in a directory that is accessed for reading an extensionless file, as....
HighCVSS 9.3
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Untrusted search path vulnerability in ALFTP before 5.31 allows local users to gain privileges via a Trojan horse executable file in a directory that is accessed for reading an extensionless file, as demonstrated by executing the README.exe file when a user attempts to access the README file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| estsoft alftp | <= 5.1 | No fix listed |
| estsoft alftp | = 4.1 | No fix listed |
| estsoft alftp | = 4.1-beta2 | No fix listed |
| estsoft alftp | = 5.0 | No fix listed |
| estsoft alftp | = 5.1-beta2 | No fix listed |
References
- jvn.jp third-party-advisory vdb-entry
- JVN#85695061 third-party-advisory vdb-entry
- JVNDB-2012-000011 third-party-advisory vdb-entry
- www.altools.jp broken-link
- www.altools.jp broken-link patch