Unquoted Windows search path vulnerability in EMC Replication Manager before 5.5 allows local users to gain privileges via a crafted application in a parent directory of an intended directory.
http://www.securitytracker.com/id/1029536
http://www.securityfocus.com/bid/64520
http://archives.neohapsis.com/archives/bugtraq/2013-12/0139.html