CVE-2014-4634 Unquoted Windows search path vulnerability in EMC Replication Manager through 5.5.2 and AppSync before 2.1.0 allows local users to gain privileges via a Trojan horse application with a name composed o...
MediumCVSS 4.6
EPSS 0.41%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unquoted Windows search path vulnerability in EMC Replication Manager through 5.5.2 and AppSync before 2.1.0 allows local users to gain privileges via a Trojan horse application with a name composed of an initial substring of a path that contains a space character.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| emc appsync | <= 2.0 | No fix listed |
| emc replication manager | <= 5.5.2 | No fix listed |
| emc replication manager | = 5.0 | No fix listed |
| emc replication manager | = 5.1 | No fix listed |
| emc replication manager | = 5.2 | No fix listed |
| emc replication manager | = 5.3 | No fix listed |
| emc replication manager | = 5.4 | No fix listed |
| emc replication manager | = 5.4.3 | No fix listed |
| emc replication manager | = 5.5 | No fix listed |
| emc replication manager | = 5.5.1 | No fix listed |