Vulnerabilities > CVE-2010-5200 - Unspecified vulnerability in Keepass

CVSS 6.9 - MEDIUM

Attack vector

LOCAL

Attack complexity

MEDIUM

Privileges required

NONE

Confidentiality impact

COMPLETE

Integrity impact

COMPLETE

Availability impact

COMPLETE

local

keepass

NVD

Published: 2012-09-06

Updated: 2012-09-13

Summary

Untrusted search path vulnerability in KeePass Password Safe before 1.18 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .kdb file. NOTE: some of these details are obtained from third party information. Per: http://cwe.mitre.org/data/definitions/426.html 'CWE-426 Untrusted Search Path'

Vulnerable Configurations

Part	Description	Count
Application	Keepass Keepass Keepass 0.8 Keepass Keepass 0.81 Keepass Keepass 0.82 Keepass Keepass 0.83 Keepass Keepass 0.84 Keepass Keepass 0.85 Keepass Keepass 0.86 Keepass Keepass 0.87 Keepass Keepass 0.88 Keepass Keepass 0.89 Keepass Keepass 0.90 Keepass Keepass 0.91 Keepass Keepass 0.92 Keepass Keepass 0.93 Keepass Keepass 0.94 Keepass Keepass 0.95 Keepass Keepass 0.96 Keepass Keepass 0.97 Keepass Keepass 0.98 Keepass Keepass 0.99 Keepass Keepass 1.00 Keepass Keepass 1.01 Keepass Keepass 1.02 Keepass Keepass 1.03 Keepass Keepass 1.04 Keepass Keepass 1.05 Keepass Keepass 1.06 Keepass Keepass 1.07 Keepass Keepass 1.08 Keepass Keepass 1.09 Keepass Keepass 1.10 Keepass Keepass 1.11 Keepass Keepass 1.12 Keepass Keepass 1.13 Keepass Keepass 1.14 Keepass Keepass 1.15 Keepass Keepass 1.16 Keepass Keepass 1.17	47

Summary

Vulnerable Configurations

References