Lucene search

K
cve[email protected]CVE-2010-5219
HistorySep 06, 2012 - 10:41 a.m.

CVE-2010-5219

2012-09-0610:41:00
NVD-CWE-Other
web.nvd.nist.gov
21
cve-2010-5219
smartftp
untrusted search path
vulnerability
local users
trojan horse
dwmapi.dll
privileges

7.3 High

AI Score

Confidence

Low

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.2%

Untrusted search path vulnerability in SmartFTP 4.0.1140.0 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .txt, .html, or .mpg file. NOTE: some of these details are obtained from third party information.

CPENameOperatorVersion
smartftp:smartftpsmartftpeq.0.1140.0

7.3 High

AI Score

Confidence

Low

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.2%

Related for CVE-2010-5219