Description
Untrusted search path vulnerability in Lhaplus before 1.58 allows local users to gain privileges via a Trojan horse executable file in the current working directory.
References
- http://www7a.biglobe.ne.jp/~schezo/dll_vul.html
- JVN#18774708 third-party-advisory
- lhaplus-untrusted-priv-escalation(64436) vdb-entry
- JVNDB-2010-000039 third-party-advisory
- 41742 third-party-advisory