CVE-2011-5157

Name: CVE-2011-5157
Creator: NVD / NIST
Published: 2012-09-06T10:41:58.613+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 0.40%

Last modified Jun 16, 2026

CVE-2011-5157 is a vulnerability of currently unknown severity. Untrusted search path vulnerability in Attachmate Reflection before 14.1 SP1 allows local users to gain privileges via a Trojan horse DLL in the current working directory, a related issue to CVE-2011-0107. NOTE: some of these details are obtained from third party information.. EPSS estimates a 0.40% chance of exploitation in the next 30 days.

Description

Untrusted search path vulnerability in Attachmate Reflection before 14.1 SP1 allows local users to gain privileges via a Trojan horse DLL in the current working directory, a related issue to CVE-2011-0107. NOTE: some of these details are obtained from third party information.

Metrics

EPSS Probability

0.40%

32.2th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Vendor	Product	Versions	Update
Attachmate	Reflection For Hp	14.0	—
Attachmate	Reflection For Hp	14.1	Sp1
Attachmate	Reflection For Ibm	14.0	—
Attachmate	Reflection For Ibm	14.1	Sp1
Attachmate	Reflection For Regis Graphics Server	14.0	—
Attachmate	Reflection For Regis Graphics Server	14.1	Sp1
Attachmate	Reflection For Unix And Openvms	14.0	—
Attachmate	Reflection For Unix And Openvms	14.1	Sp1
Attachmate	Reflection X	14.0	—
Attachmate	Reflection X	14.1	Sp1

References

http://secunia.com/advisories/46692Vendor Advisory
http://support.attachmate.com/techdocs/1708.htmlVendor Advisory
http://www.securityfocus.com/bid/50496
https://exchange.xforce.ibmcloud.com/vulnerabilities/78318
http://secunia.com/advisories/46692Vendor Advisory
http://support.attachmate.com/techdocs/1708.htmlVendor Advisory
http://www.securityfocus.com/bid/50496
https://exchange.xforce.ibmcloud.com/vulnerabilities/78318

Timeline

Published: Sep 6, 2012
Last Modified: Jun 16, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2011-5157?

How severe is CVE-2011-5157?

Severity scoring for CVE-2011-5157 is pending analysis. The EPSS model estimates a 0.40% probability of exploitation in the next 30 days.

How do I fix CVE-2011-5157?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2011-5157?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST