NetSight
IP …
high7.2Public exploit code

CVE-2017-3141

The BIND installer on Windows uses an unquoted service path which can enable a local user to achieve privilege escalation if the host file system permissions a…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The BIND installer on Windows uses an unquoted service path which can enable a local user to achieve privilege escalation if the host file system permissions allow this. Affects BIND 9.2.6-P2->9.2.9, 9.3.2-P1->9.3.6, 9.4.0->9.8.8, 9.9.0->9.9.10, 9.10.0->9.10.5, 9.11.0->9.11.1, 9.9.3-S1->9.9.10-S1, 9.10.5-S1.

Affected products

VendorProductAffected versions
IscBind
from 9.2.6 through 9.2.9
from 9.3.2 through 9.3.6
from 9.4.0 through 9.8.8
from 9.9.0 through 9.9.10
from 9.10.0 through 9.10.5
from 9.11.0 through 9.11.1

Weakness classification

CWE-428

References