CVE-2010-2368

Published: Oct 18, 2010Modified: Apr 29, 2026

6.9

Vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 3.4 / Impact: 10.0

Source: NVD

Description

Untrusted search path vulnerability in Lhaplus before 1.58 allows local users to gain privileges via a Trojan horse DLL in the current working directory.

Affected (5)

Products: Lhaplus: Lhaplus

Lhaplus

1 product

Lhaplus

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Lhaplus Lhaplus	Up to 1.57
Lhaplus Lhaplus	Version 1.52
Lhaplus Lhaplus	Version 1.53
Lhaplus Lhaplus	Version 1.55
Lhaplus Lhaplus	Version 1.56

References (10)

http://jvn.jp/en/jp/JVN82752978/index.html

Source: cve@mitre.org

http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000037.html

Source: cve@mitre.org

http://secunia.com/advisories/41742

Source: cve@mitre.org

http://www.ipa.go.jp/about/press/20101012.html

Source: cve@mitre.org

http://www7a.biglobe.ne.jp/~schezo/dll_vul.html

Source: cve@mitre.org

PatchVendor Advisory

http://jvn.jp/en/jp/JVN82752978/index.html