Unquoted Windows search path vulnerability in EMC Replication Manager before 5.5 allows local users to gain privileges via a crafted application in a parent directory of an intended directory.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Replication_manager | Emc | * | 5.4 (including) |
| Replication_manager | Emc | 5.0 (including) | 5.0 (including) |
| Replication_manager | Emc | 5.1 (including) | 5.1 (including) |
| Replication_manager | Emc | 5.2 (including) | 5.2 (including) |
| Replication_manager | Emc | 5.3 (including) | 5.3 (including) |
References
- http://archives.neohapsis.com/archives/bugtraq/2013-12/0139.html
- http://osvdb.org/101430
- http://packetstormsecurity.com/files/124584/EMC-Replication-Manager-Unquoted-File-Path-Enumeration.html
- http://www.securityfocus.com/bid/64520
- http://www.securitytracker.com/id/1029536
- http://archives.neohapsis.com/archives/bugtraq/2013-12/0139.html
- http://osvdb.org/101430
- http://packetstormsecurity.com/files/124584/EMC-Replication-Manager-Unquoted-File-Path-Enumeration.html
- http://www.securityfocus.com/bid/64520
- http://www.securitytracker.com/id/1029536