Untrusted search path vulnerability in Symantec System Recovery 2011 before SP2 and Backup Exec System Recovery 2010 before SP5 allows local users to gain privileges via a Trojan horse DLL in the current working directory.
| Software | From | Fixed in |
|---|---|---|
| symantec / backupexec_system_recovery | 2010 | 2010.x |
| symantec / backupexec_system_recovery | 2011 | 2011.x |
| symantec / system_recovery | 2011 | 2011.x |