Multiple untrusted search path vulnerabilities in pdfjam allow local users to gain privileges via a Trojan horse program in (1) the current working directory or (2) /var/tmp related to the (a) pdf90 (b) pdfjoin and (c) pdfnup scripts.