NVD

Id
46562  
Name
CVE-2012-5378  
Description
Untrusted search path vulnerability in the installation functionality in ActiveTcl 8.5.12, when installed in the top-level C: directory, allows local users to gain privileges via a Trojan horse DLL in the C:TDin directory, which is added to the PATH system environment variable, as demonstrated by a Trojan horse wlbsctrl.dll file used by the "IKE and AuthIP IPsec Keying Modules" system service in Windows Vista SP1, Windows Server 2008 SP2, Windows 7 SP1, and Windows 8 Release Preview.  
Reject
 
CVSS Version
2  
CVSS Score
6  
Severity
Medium  
CVSS Base Score
6  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
1.5  
CVSS Vector
(AV:L/AC:H/Au:S/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2012-10-11  
Modified Date
2013-03-01  
Seq
2012-5378  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
233265 46562 CVE-2012-5378 https://www.htbridge.com/advisory/HTB23108  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
29221 JVNDB-2012-004928 ActiveTcl のインストレーション機能における権限を取得される脆弱性 ActiveTcl のインストレーション機能には、検索パスに関する処理に不備があるため、C: ディレクトリのトップレベルにインストールを行う際、権限を取得される脆弱性が存在します。 CVE-2012-5378 58616 CVE-2012-5378 46562 6 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-004928.html 2012-10-11 2012-10-15 View