CVE-2017-3141 Windows service and uninstall paths are not quoted when BIND is installed
Local attackers can escalate privileges on Windows systems running BIND due to unquoted service paths in the installer.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2017-3141?
CVE-2017-3141 is a high-severity vulnerability in Isc Bind, published on 16 Jan 2019. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
The BIND installer on Windows uses an unquoted service path which can enable a local user to achieve privilege escalation if the host file system permissions allow this. Affects BIND 9.2.6-P2->9.2.9, 9.3.2-P1->9.3.6, 9.4.0->9.8.8, 9.9.0->9.9.10, 9.10.0->9.10.5, 9.11.0->9.11.1, 9.9.3-S1->9.9.10-S1, 9.10.5-S1.
Weakness: CWE-428
Which versions are affected by CVE-2017-3141?
It affects 1 product.
Products include Isc Bind.
How do I fix CVE-2017-3141?
Apply the vendor's patch.
Is CVE-2017-3141 being exploited?
There is no known exploitation of CVE-2017-3141 in the wild and no public exploit code.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in Isc Bind
Sources
Also known as ALPINE-CVE-2017-3141, GHSA-6j28-2p63-cr4r.