CVE ID:	CVE-2010-2945
Description:	The default configuration of SLiM before 1.3.2 places ./ (dot slash) at the beginning of the default_path option, which might allow local users to gain privileges via a Trojan horse program in the current working directory, related to slim.conf and cfg.cpp.
Test IDs:	1.3.6.1.4.1.25623.1.0.862634   1.3.6.1.4.1.25623.1.0.67859
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2010-2945 41005 http://secunia.com/advisories/41005 [oss-security] 20100819 CVE Request: SLiM insecure PATH assignment http://www.openwall.com/lists/oss-security/2010/08/19/8 [oss-security] 20100820 Re: CVE Request: SLiM insecure PATH assignment http://www.openwall.com/lists/oss-security/2010/08/20/10 http://svn.berlios.de/viewvc/slim?view=revision&revision=171 http://svn.berlios.de/viewvc/slim?view=revision&revision=171