NetSight
IP …
critical9.3

CVE-2012-0315

Untrusted search path vulnerability in ALFTP before 5.31 allows local users to gain privileges via a Trojan horse executable file in a directory that is access…

Impact

Untrusted search path vulnerability in ALFTP before 5.31 allows local users to gain privileges via a Trojan horse executable file in a directory that is accessed for reading an extensionless file, as demonstrated by executing the README.exe file when a user attempts to access the README file.

Affected products

VendorProductAffected versions
EstsoftAlftp
through 5.1
Versions 4.1, 5.0, 5.1

References