CVE-2012-5382

CVE-2012-5382 describes an untrusted search path vulnerability in Zend Server 5.6.0 SP4, specifically when installed in the top-level C:\ directory. This flaw could allow a local, authenticated attacker to gain privileges by introducing a malicious DLL into the Zend Server installation path, which an administrator might inadvertently add to the system's PATH environment variable. The CVSS score of 6.0 indicates a medium severity, with a local attack vector, high attack complexity, and high impact on confidentiality, integrity, and availability. While the CVE disputes the issue due to the administrative action required for the unsafe PATH, exploit code for a similar missing DLL vulnerability (EDB-28130) exists on ExploitDB, though there is no evidence of active exploitation or significant community discussion.