Lucene search

K
cveMitreCVE-2011-5157
HistorySep 06, 2012 - 10:41 a.m.

CVE-2011-5157

2012-09-0610:41:58
mitre
web.nvd.nist.gov
22
cve-2011-5157
untrusted search path vulnerability
attachmate reflection
privilege escalation
local users
trojan horse dll
vulnerability

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

AI Score

6.4

Confidence

Low

EPSS

0.167

Percentile

96.1%

Untrusted search path vulnerability in Attachmate Reflection before 14.1 SP1 allows local users to gain privileges via a Trojan horse DLL in the current working directory, a related issue to CVE-2011-0107. NOTE: some of these details are obtained from third party information.

Affected configurations

Nvd
Node
attachmatereflection_for_hpMatch14.0
OR
attachmatereflection_for_hpMatch14.1sp1
OR
attachmatereflection_for_ibmMatch14.0
OR
attachmatereflection_for_ibmMatch14.1sp1
OR
attachmatereflection_for_regis_graphics_serverMatch14.0
OR
attachmatereflection_for_regis_graphics_serverMatch14.1sp1
OR
attachmatereflection_for_unix_and_openvmsMatch14.0
OR
attachmatereflection_for_unix_and_openvmsMatch14.1sp1
OR
attachmatereflection_xMatch14.0
OR
attachmatereflection_xMatch14.1sp1
VendorProductVersionCPE
attachmatereflection_for_hp14.0cpe:2.3:a:attachmate:reflection_for_hp:14.0:*:*:*:*:*:*:*
attachmatereflection_for_hp14.1cpe:2.3:a:attachmate:reflection_for_hp:14.1:sp1:*:*:*:*:*:*
attachmatereflection_for_ibm14.0cpe:2.3:a:attachmate:reflection_for_ibm:14.0:*:*:*:*:*:*:*
attachmatereflection_for_ibm14.1cpe:2.3:a:attachmate:reflection_for_ibm:14.1:sp1:*:*:*:*:*:*
attachmatereflection_for_regis_graphics_server14.0cpe:2.3:a:attachmate:reflection_for_regis_graphics_server:14.0:*:*:*:*:*:*:*
attachmatereflection_for_regis_graphics_server14.1cpe:2.3:a:attachmate:reflection_for_regis_graphics_server:14.1:sp1:*:*:*:*:*:*
attachmatereflection_for_unix_and_openvms14.0cpe:2.3:a:attachmate:reflection_for_unix_and_openvms:14.0:*:*:*:*:*:*:*
attachmatereflection_for_unix_and_openvms14.1cpe:2.3:a:attachmate:reflection_for_unix_and_openvms:14.1:sp1:*:*:*:*:*:*
attachmatereflection_x14.0cpe:2.3:a:attachmate:reflection_x:14.0:*:*:*:*:*:*:*
attachmatereflection_x14.1cpe:2.3:a:attachmate:reflection_x:14.1:sp1:*:*:*:*:*:*

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

AI Score

6.4

Confidence

Low

EPSS

0.167

Percentile

96.1%