Multiple vulnerabilities in Small HTTP server by Smallsrv

Vulnerability related to an unquoted service path in Small HTTP Server 3.06.36, specifically affecting the executable located at 'C:\Program Files (x86)\shttps_mg\http.exe service'. This misconfiguration allows a local attacker to place a malicious executable with the same name in a higher priority directory, causing the service to execute the malicious file instead of the legitimate one. Exploiting this flaw could allow arbitrary code execution, unauthorized access to the system, or service disruption. To mitigate the risk, the service path must be properly quoted, and systems must be kept up to date with security patches, while restricting physical and network access.

N/A

未经引用的搜索路径或元素

Small Http Server 代码问题漏洞

Small Http Server是Max Feoktistov个人开发者的一个小型 Http 服务器。 Small Http Server 3.06.36版本存在代码问题漏洞，该漏洞源于未加引号的服务路径，可能导致本地攻击者将恶意可执行文件放置在更高优先级的目录中，从而执行恶意文件。

N/A

N/A