medium4.4
CVE-2012-0305
Untrusted search path vulnerability in Symantec System Recovery 2011 before SP2 and Backup Exec System Recovery 2010 before SP5 allows local users to gain priv…
Impact
Untrusted search path vulnerability in Symantec System Recovery 2011 before SP2 and Backup Exec System Recovery 2010 before SP5 allows local users to gain privileges via a Trojan horse DLL in the current working directory.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Symantec | Backupexec System Recovery | Versions 2010, 2011 |
| Symantec | System Recovery | Version 2011 |
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/54594
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120720_01
- http://www.securityfocus.com/bid/54594
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120720_01