x11perfcomp has dot in its path

Untrusted search path vulnerability in x11perfcomp in XFree86 x11perf before 1.5.4 allows local users to gain privileges via unspecified Trojan horse code in the current working directory...

PT-2013-1397 · Xfree86 +2 · Xfree86 +2

Name of the Vulnerable Software and Affected Versions: XFree86 x11perf versions prior to 1.5.4 Description: The issue allows local users to gain privileges through unspecified Trojan horse code in the current working directory due to an untrusted search path vulnerability in x11perfcomp...

CVE-2012-5188

Untrusted search path vulnerability in mora Downloader before 1.0.0.1 allows remote attackers to trigger the launch of a .exe file via unspecified vectors...

Design/Logic Flaw

Untrusted search path vulnerability in mora Downloader before 1.0.0.1 allows remote attackers to trigger the launch of a .exe file via unspecified vectors...

CVE-2012-5188

CVE-2012-5188 concerns mora Downloader before 1.0.0.1, where an untrusted search path can cause the launcher to execute a .exe via unspecified vectors. Multiple sources (NVD/Red Hat/JVN variants) confirm the flaw allows arbitrary code execution with the application’s privileges, tied to insecure ...

mora Downloader may insecurely load executable files

Overview mora Downloader may use unsafe methods for determining how to load executables .exe mora Downloader contains an issue in the file search path when loading files, which may insecurely load executables or other files. Kazuhiko Kusano of Graduate School of Information Sciences, Tohoku...

CVE-2012-0204

CVE-2012-0204 describes an untrusted search path (DLL preloading) vulnerability in IBM InfoSphere Information Server Import Export Manager. The root cause is a Trojan horse DLL in the current working directory enabling local privilege escalation when the Import Export Manager is installed on IBM ...

Foxit Reader Insecure Library Loading

A code execution vulnerability has been reported in Foxit Reader. The vulnerability is due to an error in a dynamic link library DLL search path. A remote attacker could exploit this vulnerability by enticing a user to open a file from a directory, which also contains a malicious DLL. Successful...

Symantec Enterprise Security Manager/Agent Privilege Escalation Vulnerability

This host is installed with Symantec Enterprise Security Manager/Agent and is prone to local privilege escalation vulnerability. OpenVAS Vulnerability Test $Id: gbsymantecesmprivescvuln.nasl 6079 2017-05-08 09:03:33Z teissa $ Symantec Enterprise Security Manager/Agent Privilege Escalation...

CVE-2012-0860

Multiple untrusted search path vulnerabilities in Red Hat Enterprise Virtualization Manager RHEV-M before 3.1, when adding a host, allow local users to gain privileges via a Trojan horse 1 deployUtil.py or 2 vdsbootstrap.py Python module in /tmp/...

CVE-2012-0860

Concrete details found: CVE-2012-0860 affects Red Hat Enterprise Virtualization Manager (RHEV-M) up to version 3.1. The root cause is that Python configuration scripts (deployUtil.py or vds_bootstrap.py) stored in /tmp/ could be pre-created by a local unprivileged user during host addition, allow...

CVE-2012-0860

Multiple untrusted search path vulnerabilities in Red Hat Enterprise Virtualization Manager RHEV-M before 3.1, when adding a host, allow local users to gain privileges via a Trojan horse 1 deployUtil.py or 2 vdsbootstrap.py Python module in /tmp/...

Important: Red Hat Security Advisory: JBoss Enterprise Application Platform 6.0.1 update

JBoss Enterprise Application Platform 6.0.1, which fixes multiple security issues, various bugs, and adds enhancements, is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring...

CVE-2012-4350

Multiple unquoted Windows search path vulnerabilities in the 1 Manager and 2 Agent components in Symantec Enterprise Security Manager ESM before 11.0 allow local users to gain privileges via unspecified vectors...

CVE-2012-4350

Multiple unquoted Windows search path vulnerabilities in the 1 Manager and 2 Agent components in Symantec Enterprise Security Manager ESM before 11.0 allow local users to gain privileges via unspecified vectors...

CVE-2012-4350

Symantec Enterprise Security Manager (ESM) for Windows is affected by CVE-2012-4350 due to an unquoted search path in both the Manager and Agent components, enabling local privilege escalation. Public sources (OpenVAS/Nessus entries) confirm the issue affects Windows and provide remediation: upgr...

Symantec Enterprise Security Manager Manager/Agent Local Elevation of Privilege

SUMMARY Symantecs Enterprise Security Manager ESM for Windows has an unquoted search path in the Manager and Agent components. This could allow a non-privileged local user, able to successfully insert arbitrary code in the root path, to potentially execute their code with elevated privileges duri...

Design/Logic Flaw

Unquoted Windows search path vulnerability in Symantec Network Access Control SNAC 12.1 before RU2 allows local users to gain privileges via unspecified vectors...

rhev: vds_installer insecure /tmp use

Multiple untrusted search path vulnerabilities in Red Hat Enterprise Virtualization Manager RHEV-M before 3.1, when adding a host, allow local users to gain privileges via a Trojan horse 1 deployUtil.py or 2 vdsbootstrap.py Python module in /tmp/...

CVE-2012-4206

Untrusted search path vulnerability in the installer in Mozilla Firefox before 17.0 and Firefox ESR 10.x before 10.0.11 on Windows allows local users to gain privileges via a Trojan horse DLL in the default downloads directory...