Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Unquoted service path #234

Open
Mohad0 opened this issue Jan 20, 2021 · 1 comment
Open

Unquoted service path #234

Mohad0 opened this issue Jan 20, 2021 · 1 comment

Comments

@Mohad0
Copy link

Mohad0 commented Jan 20, 2021

Hi FreeLan team,

After installing FreeLan 2.2.0 from:

I noticed that its service is hijackable due to the unquoted service path. Using this vulnerability, attackers can execute different files as FreeLAN Service. It allows local users to replace the service with arbitrary code to escalate their privileges. I hope you check this link for more details: https://cwe.mitre.org/data/definitions/428.html

@TJ-59
Copy link

TJ-59 commented Aug 15, 2023

Yup, noticed too, I submitted a Pull Request for this purpose, now we just need the team to have a look at it whenever they have time.
Meanwhile, interested people can have a look at #245 or my github for a solution.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants