CVE-2005-0497

Description

ADP Elite System Max 9000 allows remote authenticated users to gain privileges by uploading a .profile that sets the ADPROOT environment variable to the root directory.

Affected products

• adp / elite_system_max_9000

References

• MAILING_LISThttp://marc.info/?l=bugtraq&m=110901051420503&w=2
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/20622