CWE Code: 20
Vulnerability Type: privilege_escalation
CVSS Score: 6.8
CWE Name:  Improper Input Validation
Summary: untrusted search path vulnerability in cisco asa software 8.x before 8.4(3), 8.5, and 8.7 before 8.7(1.13) allows local users to gain privileges by placing a trojan horse library file in external memory, leading to library use after device reload because of an incorrect ld_library_path value, aka bug id csctq52661.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2014-10-10
Last Modified Date: 2014-10-13