CWE Code: 428
Vulnerability Type: privilege_escalation
CVSS Score: 7.2
CWE Name:  Unquoted Search Path or Element
Summary: the bind installer on windows uses an unquoted service path which can enable a local user to achieve privilege escalation if the host file system permissions allow this. affects bind 9.2.6-p2->9.2.9, 9.3.2-p1->9.3.6, 9.4.0->9.8.8, 9.9.0->9.9.10, 9.10.0->9.10.5, 9.11.0->9.11.1, 9.9.3-s1->9.9.10-s1, 9.10.5-s1.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2019-01-16
Last Modified Date: 2019-10-09