« Volver al listado

CVE-2017-3141

Estado: ModificadaAlta (7.8)—💥 Exploit

The BIND installer on Windows uses an unquoted service path which can enable a local user to achieve privilege escalation if the host file system permissions allow this. Affects BIND 9.2.6-P2->9.2.9, 9.3.2-P1->9.3.6, 9.4.0->9.8.8, 9.9.0->9.9.10, 9.10.0->9.10.5, 9.11.0->9.11.1, 9.9.3-S1->9.9.10-S1, 9.10.5-S1.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

💥 Exploits públicos

Hay código de explotación o plantillas de detección públicos. No es lo mismo que explotación activa confirmada (KEV), pero aumenta el riesgo: parchee con prioridad.

Tecnologías afectadas (1)

ISC — Bind

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2017-3141",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.2,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Secondary",
        "source": "security-officer@isc.org",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.0",
          "baseScore": 7.2,
          "attackVector": "LOCAL",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "REQUIRED",
          "attackComplexity": "HIGH",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 6,
        "exploitabilityScore": 0.6
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 7.8,
          "attackVector": "LOCAL",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 1.8
      }
    ]
  },
  "affected": [
    {
      "source": "security-officer@isc.org",
      "affectedData": [
        {
          "vendor": "ISC",
          "product": "BIND 9",
          "versions": [
            {
              "status": "affected",
              "version": "9.2.6-P2->9.2.9, 9.3.2-P1->9.3.6, 9.4.0->9.8.8, 9.9.0->9.9.10, 9.10.0->9.10.5, 9.11.0->9.11.1, 9.9.3-S1->9.9.10-S1, 9.10.5-S1"
            }
          ]
        }
      ]
    }
  ],
  "published": "2019-01-16T20:29:00.503",
  "references": [
    {
      "url": "http://www.securityfocus.com/bid/99089",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "security-officer@isc.org"
    },
    {
      "url": "http://www.securitytracker.com/id/1038693",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "security-officer@isc.org"
    },
    {
      "url": "https://kb.isc.org/docs/aa-01496",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "security-officer@isc.org"
    },
    {
      "url": "https://security.gentoo.org/glsa/201708-01",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "security-officer@isc.org"
    },
    {
      "url": "https://security.netapp.com/advisory/ntap-20180926-0001/",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "security-officer@isc.org"
    },
    {
      "url": "https://www.exploit-db.com/exploits/42121/",
      "tags": [
        "Exploit",
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "security-officer@isc.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/99089",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id/1038693",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://kb.isc.org/docs/aa-01496",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://security.gentoo.org/glsa/201708-01",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://security.netapp.com/advisory/ntap-20180926-0001/",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.exploit-db.com/exploits/42121/",
      "tags": [
        "Exploit",
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-428"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The BIND installer on Windows uses an unquoted service path which can enable a local user to achieve privilege escalation if the host file system permissions allow this. Affects BIND 9.2.6-P2->9.2.9, 9.3.2-P1->9.3.6, 9.4.0->9.8.8, 9.9.0->9.9.10, 9.10.0->9.10.5, 9.11.0->9.11.1, 9.9.3-S1->9.9.10-S1, 9.10.5-S1."
    },
    {
      "lang": "es",
      "value": "El instalador de BIND en Windows emplea una ruta de servicio sin entrecomillar que puede permitir que un usuario local logre escalar privilegios si los permisos del sistema host de archivos lo permiten.  Afecta a BIND desde la versión 9.2.6-P2 hasta la 9.2.9, desde la 9.3.2-P1 hasta la 9.3.6, desde la 9.4.0 hasta la 9.8.8, desde la 9.9.0 hasta la 9.9.10, desde la 9.10.0 hasta la 9.10.5, desde la 9.11.0 hasta la 9.11.1, desde la 9.9.3-S1 hasta la 9.9.10-S1 y en la versión 9.10.5-S1."
    }
  ],
  "lastModified": "2026-06-17T01:17:36.343",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "880FF52C-CE36-4DE2-8FF7-8FEFCA53854C",
              "versionEndIncluding": "9.2.9",
              "versionStartIncluding": "9.2.6"
            },
            {
              "criteria": "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6756023D-C9EF-460D-A498-F9A3238B3570",
              "versionEndIncluding": "9.3.6",
              "versionStartIncluding": "9.3.2"
            },
            {
              "criteria": "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "343E9DD3-BBEA-4385-9A8E-0675BE74EC43",
              "versionEndIncluding": "9.8.8",
              "versionStartIncluding": "9.4.0"
            },
            {
              "criteria": "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4D75A16E-2EB4-4A10-9B63-AC04755AC1E4",
              "versionEndIncluding": "9.9.10",
              "versionStartIncluding": "9.9.0"
            },
            {
              "criteria": "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E8039263-E38B-40B2-B3AA-3673C0DD8318",
              "versionEndIncluding": "9.10.5",
              "versionStartIncluding": "9.10.0"
            },
            {
              "criteria": "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A8E6E2D9-E137-498C-B175-1CA268B6E551",
              "versionEndIncluding": "9.11.1",
              "versionStartIncluding": "9.11.0"
            },
            {
              "criteria": "cpe:2.3:a:isc:bind:9.2.6:p2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "16C74641-25F0-42CD-9523-5E026CCB716E"
            },
            {
              "criteria": "cpe:2.3:a:isc:bind:9.3.2:p1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6DC920B0-8C10-4C41-9AAD-C42AA4DF8368"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security-officer@isc.org"
}