CVE-2010-2369

Untrusted search path vulnerability in Lhasa 0.19 and earlier allows local users to gain privileges via a Trojan horse executable file in the current working directory.

Score

CVSS 2.0 6.9 Medium

Status

Modified - cve@mitre.org

Published

2010-10-18

Last modified

2024-09-17

Affected products

• Lhasa (Susie Ro)

References

• http://jvn.jp/en/jp/JVN88850043/index.html
• http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000038.html
• http://www.ipa.go.jp/about/press/20101012_2.html