CVE-2010-3158

2010-10-1920:00:04

[email protected]

web.nvd.nist.gov

cve-2010-3158

untrusted search path vulnerability

lhaplus

privilege escalation

6.6 Medium

AI Score

Confidence

Low

6.9 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.2%

JSON

Untrusted search path vulnerability in Lhaplus before 1.58 allows local users to gain privileges via a Trojan horse executable file in the current working directory.

Affected configurations

NVD

Node

lhapluslhaplusRange≤1.57

lhapluslhaplusMatch1.52

lhapluslhaplusMatch1.53

lhapluslhaplusMatch1.55

lhapluslhaplusMatch1.56

CPENameOperatorVersion
lhaplus:lhapluslhaplusle1.57
lhaplus:lhapluslhapluseq1.52
lhaplus:lhapluslhapluseq1.53
lhaplus:lhapluslhapluseq1.55
lhaplus:lhapluslhapluseq1.56