CVE-2012-0305

2012-07-2317:55:03

[email protected]

web.nvd.nist.gov

cve-2012-0305

untrusted search path

symantec system recovery

backup exec system recovery

local privilege escalation

vulnerability

4.4 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.5%

JSON

Untrusted search path vulnerability in Symantec System Recovery 2011 before SP2 and Backup Exec System Recovery 2010 before SP5 allows local users to gain privileges via a Trojan horse DLL in the current working directory.

Affected configurations

NVD

Node

symantecbackupexec_system_recoveryMatch2010

symantecbackupexec_system_recoveryMatch2011

symantecsystem_recoveryMatch2011

CPENameOperatorVersion
symantec:backupexec_system_recoverysymantec backupexec system recoveryeq2010
symantec:backupexec_system_recoverysymantec backupexec system recoveryeq2011
symantec:system_recoverysymantec system recoveryeq2011

CPE	Name	Operator	Version
symantec:backupexec_system_recovery	symantec backupexec system recovery	eq	2010
symantec:backupexec_system_recovery	symantec backupexec system recovery	eq	2011
symantec:system_recovery	symantec system recovery	eq	2011