CVE-2019-25267 | BDVDB-2026-313707 Detail

Description#

Wing FTP Server 6.0.7 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted binary path in the service configuration to inject malicious executables that will be launched with LocalSystem permissions.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-02-04Record published in the CVE List.
2. Version 22026-03-05Most recent update recorded in the CVE List.