Description
PHPNetToolpack 0.1 relies on its environment's PATH to find and execute the traceroute program, which could allow local users to gain privileges by inserting a Trojan horse program into the search path.
References
- 20020318 PHP Net Toolpack: input validation error mailing-list
- phpnettoolpack-traceroute-insecure-path(8484) vdb-entry
- 4304 vdb-entry