Description
Untrusted search path vulnerability in Lhasa 0.19 and earlier allows local users to gain privileges via a Trojan horse executable file in the current working directory.
References
- JVNDB-2010-000038 third-party-advisory
- JVN#88850043 third-party-advisory
- http://www.ipa.go.jp/about/press/20101012_2.html