Executive Summary

Informations
NameCVE-2017-3141First vendor Publication2019-01-16
VendorCveLast vendor Modification2019-10-09

Security-Database Scoring CVSS v2

Cvss vector : (AV:L/AC:L/Au:N/C:C/I:C/A:C)
Cvss Base Score7.2Attack RangeLocal
Cvss Impact Score10Attack ComplexityLow
Cvss Expoit Score3.9AuthenticationNone Required
Calculate full CVSS 2.0 Vectors scores

Detail

The BIND installer on Windows uses an unquoted service path which can enable a local user to achieve privilege escalation if the host file system permissions allow this. Affects BIND 9.2.6-P2->9.2.9, 9.3.2-P1->9.3.6, 9.4.0->9.8.8, 9.9.0->9.9.10, 9.10.0->9.10.5, 9.11.0->9.11.1, 9.9.3-S1->9.9.10-S1, 9.10.5-S1.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3141

CWE : Common Weakness Enumeration

%idName
100 %CWE-428Unquoted Search Path or Element

CPE : Common Platform Enumeration

TypeDescriptionCount
Application318

Nessus® Vulnerability Scanner

DateDescription
2017-08-17Name : The remote Gentoo host is missing one or more security-related patches.
File : gentoo_GLSA-201708-01.nasl - Type : ACT_GATHER_INFO
2017-06-22Name : The remote name server is affected by multiple vulnerabilities.
File : bind9_9111_p1.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

SourceUrl
BID http://www.securityfocus.com/bid/99089
CONFIRM https://kb.isc.org/docs/aa-01496
https://security.netapp.com/advisory/ntap-20180926-0001/
EXPLOIT-DB https://www.exploit-db.com/exploits/42121/
GENTOO https://security.gentoo.org/glsa/201708-01
SECTRACK http://www.securitytracker.com/id/1038693

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
DateInformations
2019-10-10 05:19:57
  • Multiple Updates
2019-10-03 09:20:19
  • Multiple Updates
2019-02-12 00:18:49
  • Multiple Updates
2019-01-17 17:18:52
  • Multiple Updates
2019-01-17 00:19:17
  • First insertion