Vulnerability in Symantec Backupexec_system_recovery

CVE-2012-0305

Untrusted search path vulnerability in Symantec System Recovery 2011 before SP2 and Backup Exec System Recovery 2010 before SP5 allows local users to gain privileges via a Trojan horse DLL in the current working directory.

EPSS: 0.004 (34.8th percentile) — read the EPSS interpretation.

Affected products

Symantec Backupexec_system_recovery — versions 2010, 2011
Symantec System_recovery — versions 2011
N/a — versions n/a

References

cve@mitre.org (x_refsource_CONFIRM)
cve@mitre.org (vdb-entry, x_refsource_BID)