Unquoted Search Path or Element in freeSSHd - CVE-2017-1000475
Published: January 24, 2018 / Updated: August 8, 2020
Vulnerability identifier: #VU37592
CSH Severity: Low
CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2017-1000475
CWE-ID: CWE-428
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local authenticated user to execute arbitrary code.
FreeSSHd 1.3.1 version is vulnerable to an Unquoted Path Service allowing local users to launch processes with elevated privileges.
Affected software
freeSSHd
How to mitigate CVE-2017-1000475
Install update from vendor's website.