8982 matches found
CVE-2012-5377
Untrusted search path vulnerability in the installation functionality in ActivePerl 5.16.1.1601, when installed in the top-level C:\ directory, allows local users to gain privileges via a Trojan horse DLL in the C:\Perl\Site\bin directory, which is added to the PATH system environment variable, a...
CVE-2012-5381
Untrusted search path vulnerability in the installation functionality in PHP 5.3.17, when installed in the top-level C:\ directory, might allow local users to gain privileges via a Trojan horse DLL in the C:\PHP directory, which may be added to the PATH system environment variable by an...
CVE-2012-5383
CVE-2012-5383 describes an untrusted search path vulnerability in Oracle MySQL 5.5.28 when installed in the top-level C:\ directory. A Trojan horse DLL (wlbsctrl.dll) in C:\MySQL\MySQL Server 5.5\bin could be added to the PATH by an administrator and loaded by the IKE and AuthIP IPsec Keying Modu...
CVE-2012-5380
Untrusted search path vulnerability in the installation functionality in Ruby 1.9.3-p194, when installed in the top-level C:\ directory, might allow local users to gain privileges via a Trojan horse DLL in the C:\Ruby193\bin directory, which may be added to the PATH system environment variable by...
CVE-2012-5382
Untrusted search path vulnerability in the installation functionality in Zend Server 5.6.0 SP4, when installed in the top-level C:\ directory, might allow local users to gain privileges via a Trojan horse DLL in the C:\Zend\ZendServer\share\ZendFramework\bin directory, which may be added to the...
PT-2012-5963 · Microsoft +1 · Windows 8 +4
Name of the Vulnerable Software and Affected Versions: PHP version 5.3.17 Description: The issue is related to an untrusted search path vulnerability in the installation functionality of PHP. This vulnerability might allow local users to gain privileges via a Trojan horse DLL in the C:PHP...
PT-2012-5962 · Ruby +1 · Ruby +1
Name of the Vulnerable Software and Affected Versions: Ruby version 1.9.3-p194 Description: The installation functionality in Ruby has an untrusted search path vulnerability when installed in the top-level C: directory. This might allow local users to gain privileges via a Trojan horse DLL in the...
PT-2012-5965 · Microsoft +1 · Windows 8 +4
Name of the Vulnerable Software and Affected Versions: Oracle MySQL version 5.5.28 Description: The issue is related to an untrusted search path vulnerability in the installation functionality of Oracle MySQL. This vulnerability might allow local users to gain privileges via a Trojan horse DLL in...
PT-2012-5964 · Zend · Zend Server
Name of the Vulnerable Software and Affected Versions: Zend Server version 5.6.0 SP4 Description: The installation functionality in Zend Server has an untrusted search path vulnerability when installed in the top-level C: directory. This might allow local users to gain privileges via a Trojan hor...
CVE-2012-4897
Untrusted search path vulnerability in the installer in VMware Movie Decoder before 9.0 allows local users to gain privileges via a Trojan horse executable file in the installer directory...
Design/Logic Flaw
Untrusted search path vulnerability in the installer in VMware Movie Decoder before 9.0 allows local users to gain privileges via a Trojan horse executable file in the installer directory...
CVE-2012-4897
Untrusted search path vulnerability in the installer in VMware Movie Decoder before 9.0 allows local users to gain privileges via a Trojan horse executable file in the installer directory...
CVE-2012-4897
CVE-2012-4897 affects VMware Movie Decoder prior to 9.0. The advisory describes a binary planting vulnerability in the Movie Decoder installer that could let a local attacker run code by placing a malicious executable in the installer directory. VMware recommends upgrading to Movie Decoder 9.0 (a...
IBM Lotus Symphony Multiple Untrusted Search Path Vulnerabilities - Windows
IBM Lotus Symphony is prone to multiple untrusted search path vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2012-3052
Untrusted search path vulnerability in Cisco VPN Client 5.0 allows local users to gain privileges via a Trojan horse DLL in the current working directory, aka Bug ID CSCua28747...
Design/Logic Flaw
Untrusted search path vulnerability in Cisco VPN Client 5.0 allows local users to gain privileges via a Trojan horse DLL in the current working directory, aka Bug ID CSCua28747...
CVE-2012-3052
Untrusted search path vulnerability in Cisco VPN Client 5.0 allows local users to gain privileges via a Trojan horse DLL in the current working directory, aka Bug ID CSCua28747...
CVE-2012-3052
The vulnerability CVE-2012-3052 affects Cisco VPN Client 5.x prior to 5.0.07.0440 and stems from untrusted DLL search path handling. An attacker with local access could place a Trojan DLL in the current working directory, which could be loaded and lead to privilege escalation. Publicly documented...
Adobe LiveCycle Designer Untrusted Search Path Vulnerability - Windows
Adobe LiveCycle Designer is prone to untrusted search path vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Adobe LiveCycle Designer Untrusted Search Path Vulnerability (Windows)
This host is installed with Adobe LiveCycle Designer and is prone to untrusted search path vulnerability. OpenVAS Vulnerability Test $Id: gbadobelivecycledesigneruntrustedsearchpathvulnwin.nasl 5963 2017-04-18 09:02:14Z teissa $ Adobe LiveCycle Designer Untrusted Search Path Vulnerability Windows...