Untrusted search path vulnerability in Symantec System Recovery 2011 before SP2 and Backup Exec System Recovery 2010 before SP5 allows local users to gain privileges via a Trojan horse DLL in the current working directory.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Backupexec_system_recovery | Symantec | 2010 (including) | 2010 (including) |
| Backupexec_system_recovery | Symantec | 2011 (including) | 2011 (including) |
| System_recovery | Symantec | 2011 (including) | 2011 (including) |
References
- http://www.securityfocus.com/bid/54594
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory\u0026pvid=security_advisory\u0026year=2012\u0026suid=20120720_01
- http://www.securityfocus.com/bid/54594
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory\u0026pvid=security_advisory\u0026year=2012\u0026suid=20120720_01