Unrated severityNVD Advisory· Published Feb 22, 2012· Updated Apr 29, 2026
CVE-2012-0315
CVE-2012-0315
Description
Untrusted search path vulnerability in ALFTP before 5.31 allows local users to gain privileges via a Trojan horse executable file in a directory that is accessed for reading an extensionless file, as demonstrated by executing the README.exe file when a user attempts to access the README file.
Affected products
6cpe:2.3:a:estsoft:alftp:*:*:*:*:*:*:*:*+ 5 more
- cpe:2.3:a:estsoft:alftp:*:*:*:*:*:*:*:*range: <=5.1
- cpe:2.3:a:estsoft:alftp:4.1:*:*:*:*:*:*:*
- cpe:2.3:a:estsoft:alftp:4.1:beta2:*:*:*:*:*:*
- cpe:2.3:a:estsoft:alftp:4.1:beta2:*:en:*:*:*:*
- cpe:2.3:a:estsoft:alftp:5.0:*:*:*:*:*:*:*
- cpe:2.3:a:estsoft:alftp:5.1:beta2:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5- www.altools.jp/download.aspxnvdBroken LinkPatch
- jvn.jp/en/jp/JVN85695061/995223/index.htmlnvdThird Party AdvisoryVDB Entry
- jvn.jp/en/jp/JVN85695061/index.htmlnvdThird Party AdvisoryVDB Entry
- jvndb.jvn.jp/jvndb/JVNDB-2012-000011nvdThird Party AdvisoryVDB Entry
- www.altools.jp/ETC/NEWS.aspxnvdBroken Link
News mentions
0No linked articles in our index yet.