CVEvulnerability
CVE-2010-3158
6.9 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2010-10-19
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C
Description
Untrusted search path vulnerability in Lhaplus before 1.58 allows local users to gain privileges via a Trojan horse executable file in the current working directory.
Affected configurations
• lhaplus lhaplus (<= 1.57)
• lhaplus lhaplus 1.52
• lhaplus lhaplus 1.53
• lhaplus lhaplus 1.55
• lhaplus lhaplus 1.56
References
- http://jvn.jp/jp/JVN18774708/index.html jvn.jp
- http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000039.html jvndb.jvn.jp
- http://secunia.com/advisories/41742 Vendor Advisory
- http://www7a.biglobe.ne.jp/~schezo/dll_vul.html www7a.biglobe.ne.jp
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64436 exchange.xforce.ibmcloud.com
- http://jvn.jp/jp/JVN18774708/index.html jvn.jp
- http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000039.html jvndb.jvn.jp
- http://secunia.com/advisories/41742 Vendor Advisory
- http://www7a.biglobe.ne.jp/~schezo/dll_vul.html www7a.biglobe.ne.jp
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64436 exchange.xforce.ibmcloud.com