CVE-2012-0305
mediumpriority · track · 18EPSS 0.004 · 37 %ileEUUSEPSS · scored 2026-10-28
Untrusted search path vulnerability in Symantec System Recovery 2011 before SP2 and Backup Exec System Recovery 2010 before SP5 allows local users to gain privileges via a Trojan horse DLL in the current working directory.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · low–medium · 3.7–4.4
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (4)
Products and version ranges known to be affected.
- symantec backupexec system recovery= 2010nvdUScpe:2.3:a:symantec:backupexec_system_recovery:*:*:*:*:*:*:*:*
- symantec backupexec system recovery= 2011nvdUScpe:2.3:a:symantec:backupexec_system_recovery:*:*:*:*:*:*:*:*
also known as (3)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (8)
External citations — patches, advisories, analysis.
- http://secunia.com/advisories/50033cnnvd
- http://www.securityfocus.com/bid/54594cnnvd
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&suid=20120720_01cnnvd
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&suid=20120720_01Patchcnnvd
- http://www.securityfocus.com/bid/54594enisa_euvd
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120720_01enisa_euvd
- http://www.securityfocus.com/bid/54594nvd
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120720_01nvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan