Security Advisory

CVE-2012-0315

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2012-02-22 11:00:00
Last updated 2024-09-17 00:50:50
Assigner jpcert
CVSS score not scored
State PUBLISHED

Description

Untrusted search path vulnerability in ALFTP before 5.31 allows local users to gain privileges via a Trojan horse executable file in a directory that is accessed for reading an extensionless file, as demonstrated by executing the README.exe file when a user attempts to access the README file.