Lucene search

K
cveMitreCVE-2010-5265
HistorySep 07, 2012 - 10:32 a.m.

CVE-2010-5265

2012-09-0710:32:23
mitre
web.nvd.nist.gov
20
cve-2010-5265
untrusted search path
smartsniff 1.71
wpcap.dll
local privilege escalation
vulnerability
nvd

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

AI Score

6.7

Confidence

High

EPSS

0

Percentile

5.1%

Untrusted search path vulnerability in SmartSniff 1.71 allows local users to gain privileges via a Trojan horse wpcap.dll file in the current working directory, as demonstrated by a directory that contains a .cfg or .ssp file. NOTE: some of these details are obtained from third party information.

Affected configurations

Nvd
Node
nirsoftsmartsniffMatch1.71
VendorProductVersionCPE
nirsoftsmartsniff1.71cpe:2.3:a:nirsoft:smartsniff:1.71:*:*:*:*:*:*:*

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

AI Score

6.7

Confidence

High

EPSS

0

Percentile

5.1%

Related for CVE-2010-5265