CVE-2010-2368

2010-10-1817:00:03

[email protected]

web.nvd.nist.gov

cve-2010-2368

untrusted search path vulnerability

lhaplus

privilege escalation

trojan horse dll

nvd

6.6 Medium

AI Score

Confidence

Low

6.9 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.2%

JSON

Untrusted search path vulnerability in Lhaplus before 1.58 allows local users to gain privileges via a Trojan horse DLL in the current working directory.

Affected configurations

NVD

Node

lhapluslhaplusRange≤1.57

lhapluslhaplusMatch1.52

lhapluslhaplusMatch1.53

lhapluslhaplusMatch1.55

lhapluslhaplusMatch1.56

CPENameOperatorVersion
lhaplus:lhapluslhaplusle1.57
lhaplus:lhapluslhapluseq1.52
lhaplus:lhapluslhapluseq1.53
lhaplus:lhapluslhapluseq1.55
lhaplus:lhapluslhapluseq1.56