CVE-2012-0315: Untrusted search path vulnerability in ALFTP before 5.31 allows local users to gain privileges via a Trojan...

Security readout for executives and security teams

CVE-2012-0315 is a local privilege risk in ALFTP before 5.31. A lower-privileged local user may trick the application into running an executable from an untrusted directory when another user opens an extensionless file. Business urgency depends on whether ALFTP is still installed and used on managed systems. Exposure is likely limited to systems with ALFTP versions before 5.31 installed, especially shared or multi-user environments where local users can place files in directories later accessed by another user through ALFTP. Treat this as a targeted legacy software hygiene issue, not an internet-scale emergency. Prioritize discovery and removal or upgrade where ALFTP remains in use, especially on shared systems or privileged user workstations. Mitigation focus: Inventory systems for ALFTP installations and version numbers.; Upgrade ALFTP to 5.31 or later if vendor guidance supports it.; Remove ALFTP where it is no longer required..

Prepared

Jun 24, 2026, 12:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.