CVE-2012-0315

CVE-2012-0315 describes an untrusted search path vulnerability in ALFTP versions prior to 5.31. This flaw allows a local attacker to achieve privilege escalation by placing a malicious executable (e.g., README.exe) in a directory where the legitimate ALFTP application attempts to open an extensionless file (e.g., README). With a CVSS score of 9.3, this vulnerability is critical, indicating a high potential for complete compromise of confidentiality, integrity, and availability, with a network attack vector and medium attack complexity. Despite its severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.