Main Vulnerability Database Vulnerabilities #VU37592

Unquoted Search Path or Element in freeSSHd - CVE-2017-1000475

Published: January 24, 2018 / Updated: August 8, 2020

Vulnerability identifier: #VU37592

CSH Severity: Low

CVSS v4.0: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear

CVE-ID: CVE-2017-1000475

CWE-ID: CWE-428

Exploitation vector: Local access

Exploit availability: No public exploit available

Vendor: freesshd.com

Affected software:
freeSSHd

Detailed vulnerability description

The vulnerability allows a local authenticated user to execute arbitrary code.

FreeSSHd 1.3.1 version is vulnerable to an Unquoted Path Service allowing local users to launch processes with elevated privileges.

Install update from vendor's website.