1038
Reference Description
CVE-2005-1705 Product searches current working directory for configuration file.
https://www.cve.org/CVERecord?id=CVE-2005-1705
CVE-2005-1307 Product executable other program from current working directory.
https://www.cve.org/CVERecord?id=CVE-2005-1307
CVE-2002-2040 Untrusted path.
https://www.cve.org/CVERecord?id=CVE-2002-2040
CVE-2005-2072 Modification of trusted environment variable leads to untrusted path
vulnerability.
https://www.cve.org/CVERecord?id=CVE-2005-2072
CVE-2005-1632 Product searches /tmp for modules before other paths.
https://www.cve.org/CVERecord?id=CVE-2005-1632
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 991 SFP Secondary Cluster: Tainted Input to Environment 888 2416
MemberOf 1403 Comprehensive Categorization: Exposed Resource 1400 2528
Notes
Relationship
Unlike untrusted search path (CWE-426), which inherently involves control over the definition of
a control sphere (i.e., modification of a search path), this entry concerns a fixed control sphere
in which some part of the sphere may be under attacker control (i.e., the search path cannot be
modified by an attacker, but one element of the path can be under attacker control).
Theoretical
This weakness is not a clean fit under CWE-668 or CWE-610, which suggests that the control
sphere model might need enhancement or clarification.
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
PLOVER Uncontrolled Search Path Element
Related Attack Patterns
CAPEC-ID Attack Pattern Name
38 Leveraging/Manipulating Configuration File Search Paths
471 Search Order Hijacking
References
[REF-409]Georgi Guninski. "Double clicking on MS Office documents from Windows Explorer may
execute arbitrary programs in some cases". Bugtraq. 2000 September 8. < https://seclists.org/
bugtraq/2000/Sep/331 >.2023-01-30.
[REF-410]Mitja Kolsek. "ACROS Security: Remote Binary Planting in Apple iTunes for Windows
(ASPR #2010-08-18-1)". Bugtraq. 2010 August 8. < https://lists.openwall.net/bugtraq/2010/08/18/4
>.2023-01-30.
[REF-411]Taeho Kwon and Zhendong Su. "Automatic Detection of Vulnerable Dynamic
Component Loadings". < https://dl.acm.org/doi/10.1145/1831708.1831722 >.2023-04-07.
[REF-412]"Dynamic-Link Library Search Order". 2010 September 2. Microsoft. < https://
learn.microsoft.com/en-us/windows/win32/dlls/dynamic-link-library-search-order?
redirectedfrom=MSDN >.2023-04-07.
CWE Version 4.14
CWE-428: Unquoted Search Path or Element
CWE-428: Unquoted Search Path or Element