CVE-2017-5873

Unquoted Windows search path vulnerability in the guest service in Unisys s-Par before 4.4.20 allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory, as demonstrated by program.exe.

Unquoted Windows search path vulnerability in the guest service in Unisys s-Par before 4.4.20 allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory, as demonstrated by program.exe.

Vulnerabilidad de ruta de búsqueda de Windows no citada en el servicio al cliente en Unisys s-Par en versiones anteriores a 4.4.20 permite a usuarios locales obtener privilegios a través de un archivo troyano ejecutable en el directorio %SYSTEMDRIVE%, como se demuestra por program.exe.