CVE-2019-25306

CVE-2019-25306 affects BlackMoon FTP Server 3.1.2.1731. The issue is an unquoted service path in the server’s service configuration, allowing a local attacker to insert a malicious executable that would be started at service startup with LocalSystem privileges. Impact is elevated privileges (CON/...