CWE Code: 428
Vulnerability Type: privilege_escalation
CVSS Score: 6.9
CWE Name:  Unquoted Search Path or Element
Summary: unquoted windows search path vulnerability in the ptservice service in privatetunnel 2.3.8, as bundled in openvpn 2.1.28.0 allows local users to gain privileges via a crafted program.exe file in the %systemdrive% folder. <a href="http://cwe.mitre.org/data/definitions/428.html" target="_blank">cwe-428: unquoted search path or element</a>
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2014-08-25
Last Modified Date: 2016-11-14