Description
Untrusted search path vulnerability in Fenrir Sleipnir 2.9.4 and earlier and Grani 4.3 and earlier allows local users to gain privileges via a Trojan horse executable file in the current working directory.
References
- http://www.fenrir.co.jp/blog/2010/10/sleipnirsleipnir_295.html
- sleipnir-grani-untrusted-priv-escalation(64435) vdb-entry
- JVNDB-2010-000048 third-party-advisory
- JVN#89272705 third-party-advisory
- http://www.fenrir.co.jp/grani/note.html