Untrusted search path vulnerability in AttacheCase before 2.70 allows local users to gain privileges via a Trojan horse executable file in the current working directory.

Metrics

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Local

Access Complexity Medium

Authentication None

Confidentiality Impact Complete

Integrity Impact Complete

Availability Impact Complete

This CVE is not in the KEV list.

The EPSS score is 0.00053.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Mitsu Hiro Hi Rose Subscribe
Attachecase Subscribe

Configuration 1 [-]

OR cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:*:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:0.01:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:0.02:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:0.03:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:0.04:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:0.05:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:0.06:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:0.07:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:1.00:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:1.01:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:1.02:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:1.03:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:1.04:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:1.05:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:1.06:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:1.07:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:1.08:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:1.09:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:1.10:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:1.11:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:1.12:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:1.20:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:1.21:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:1.22:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:1.23:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:1.24:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:1.25:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:1.30:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:1.31:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:1.32:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:1.33:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:1.34:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:1.35:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:1.36:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:1.37:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:1.38:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:1.39:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:1.40:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:1.41:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:1.42:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:1.43:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:1.44:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:1.45:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:1.46:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:1.091:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.00:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.01:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.02:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.03:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.04:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.05:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.06:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.07:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.08:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.09:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.10:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.11:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.12:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.13:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.14:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.15:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.16:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.17:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.18:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.20:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.21:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.22:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.23:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.24:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.25:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.26:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.27:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.28:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.30:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.31:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.32:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.33:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.34:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.35:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.36:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.37:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.38:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.40:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.41:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.42:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.43:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.44:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.45:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.46:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.47:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.48:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.49:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.50:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.51:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.52:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.53:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.54:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.55:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.56:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.57:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.58:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.60:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.61:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.62:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.63:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.64:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.65:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.66:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.67:*:*:*:*:*:*:*
cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.68:*:*:*:*:*:*:*

No data.

No data.

Advisories
Source ID Title
EUVD EUVD EUVD-2010-3901 Untrusted search path vulnerability in AttacheCase before 2.70 allows local users to gain privileges via a Trojan horse executable file in the current working directory.
Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
http://homepage2.nifty.com/hibara/software/atcs.htm cve-icon cve-icon
http://jvn.jp/en/jp/JVN02175694/index.html cve-icon cve-icon
http://jvndb.jvn.jp/en/contents/2010/JVNDB-2010-000066.html cve-icon cve-icon
http://secunia.com/advisories/42672 cve-icon cve-icon
History

No history.

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: jpcert

Published:

Updated: 2024-09-17T02:42:55.407Z

Reserved: 2010-10-12T00:00:00Z

Link: CVE-2010-3923

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2010-12-30T21:00:01.970

Modified: 2025-04-11T00:51:21.963

Link: CVE-2010-3923

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses