CVE-2006-1296

Beagle 0.2.2.1 is affected by an Untrusted search path vulnerability that may allow local privilege escalation when a malicious beagle-info executable is present in the current working directory or in directories listed in PATH. The description indicates that wrapper scripts (e.g., beagle-status)...

CVE-2006-1246

Unspecified vulnerability in mklvcopy in BOS.RTE.LVM in IBM AIX 5.3 allows local users to execute arbitrary commands when mklvcopy calls external commands, possibly due to an untrusted search path vulnerability...

Xxe

Unspecified vulnerability in mklvcopy in BOS.RTE.LVM in IBM AIX 5.3 allows local users to execute arbitrary commands when mklvcopy calls external commands, possibly due to an untrusted search path vulnerability...

CVE-2006-1246

Unspecified vulnerability in mklvcopy in BOS.RTE.LVM in IBM AIX 5.3 allows local users to execute arbitrary commands when mklvcopy calls external commands, possibly due to an untrusted search path vulnerability...

Design/Logic Flaw

Untrusted search path vulnerability in the TrueVector service VSMON.exe in Zone Labs ZoneAlarm 6.x and Integrity does not search ZoneAlarm's own folders before other folders that are specified in a user's PATH, which might allow local users to execute code as SYSTEM by placing malicious DLLs into...

CVE-2006-1221

Untrusted search path vulnerability in the TrueVector service VSMON.exe in Zone Labs ZoneAlarm 6.x and Integrity does not search ZoneAlarm's own folders before other folders that are specified in a user's PATH, which might allow local users to execute code as SYSTEM by placing malicious DLLs into...

CVE-2005-4728

CVE-2005-4728 affects Amaya 9.2.1 on Debian GNU/Linux and is caused by an untrusted search path (RPATH) vulnerability that lets local users gain privileges via a malicious Mesa library placed in /home/anand. The connected documents corroborate the same description across Red Hat, Ubuntu, CVE, and...

Design/Logic Flaw

Unquoted Windows search path vulnerability in 1 snsmcon.exe, 2 the autostartup mechanism, and 3 an unspecified installation component in StarForce Safe'n'Sec Personal + Anti-Spyware 2.0 and earlier, and possibly other StarForce Safe'n'Sec products, might allow local users to gain privileges via a...

CVE-2005-1528

Untrusted search path vulnerability in the crttrap command in QNX Neutrino RTOS 6.2.1 allows local users to load arbitrary libraries via a LDLIBRARYPATH environment variable that references a malicious library...

CVE-2005-1528

CVE-2005-1528 affects QNX Neutrino RTOS 6.2.1, where the crttrap command is vulnerable to untrusted search path issues. A local user can set LD_LIBRARY_PATH to point to a malicious library, which crttrap may load, leading to arbitrary code execution with root privileges because crttrap is install...

Design/Logic Flaw

Untrusted search path vulnerability in opcontrol in OProfile 0.9.1 and earlier allows local users to execute arbitrary commands via a modified PATH that references malicious 1 which or 2 dirname programs. NOTE: while opcontrol normally is not run setuid, a common configuration suggests accessing...

CVE-2006-0576

Untrusted search path vulnerability in opcontrol in OProfile 0.9.1 and earlier allows local users to execute arbitrary commands via a modified PATH that references malicious 1 which or 2 dirname programs. NOTE: while opcontrol normally is not run setuid, a common configuration suggests accessing...

CVE-2006-0576

Untrusted search path vulnerability in opcontrol in OProfile 0.9.1 and earlier allows local users to execute arbitrary commands via a modified PATH that references malicious 1 which or 2 dirname programs. NOTE: while opcontrol normally is not run setuid, a common configuration suggests accessing...

CVE-2006-0576

CVE-2006-0576 affects opcontrol in OProfile 0.9.1 and earlier, where an untrusted search path allows local users to execute arbitrary commands by a crafted PATH referencing (1) which or (2) dirname programs. The issue can occur in contexts where opcontrol is accessed via sudo, though opcontrol is...

CVE-2006-0576

Untrusted search path vulnerability in opcontrol in OProfile 0.9.1 and earlier allows local users to execute arbitrary commands via a modified PATH that references malicious 1 which or 2 dirname programs. NOTE: while opcontrol normally is not run setuid, a common configuration suggests accessing...

CVE-2006-0229

Unquoted Windows search path vulnerability in Wehntrust might allow local users to gain privileges via a malicious "program.exe" file in the C: folder, which is run when Wehntrust creates the autostart key...

Design/Logic Flaw

Unquoted Windows search path vulnerability in Wehntrust might allow local users to gain privileges via a malicious "program.exe" file in the C: folder, which is run when Wehntrust creates the autostart key...

CVE-2006-0229

CVE-2006-0229 concerns the Wehntrust Windows utility, vulnerable due to an unquoted Windows search path. A local attacker could create a malicious C:\program.exe that is executed when Wehntrust creates its autostart entry, potentially allowing privilege escalation. The CVSS data indicates local, ...

CVE-2006-0229

Unquoted Windows search path vulnerability in Wehntrust might allow local users to gain privileges via a malicious "program.exe" file in the C: folder, which is run when Wehntrust creates the autostart key...

CVE-2005-4595

CVE-2005-4595 describes an untrusted search path (RPATH/DT_RPATH) vulnerability in XnView 1.70 and NView 4.51 on Gentoo Linux. The dynamic loader could search in untrusted directories for shared libraries, enabling a local attacker to execute arbitrary code with the privileges of the user running...