New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

nsclient++.exe / Unquoted Service Path Enumeration #797

Open

ca-py-ba-ra opened this issue Mar 21, 2023 · 0 comments

ca-py-ba-ra commented Mar 21, 2023

On Windows, the service NSClientpp is missing quotation marks:
C:\Program Files\NSClient++\nsclient++.exe

For this reason, the service is vulnerable to "Unquoted Service Path Enumeration".

More information about the vulnerability can be found here:
https://attack.mitre.org/techniques/T1574/009/

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment