CVE-2018-6384

Name of the Vulnerable Software and Affected Versions NSClient++ versions prior to 0.4.1.73

Description The issue allows non-privileged local users to execute arbitrary code with elevated privileges on the system. This can be achieved by placing a malicious program.exe executable in the %SYSTEMDRIVE% folder, exploiting an unquoted Windows search path vulnerability.

Recommendations For versions prior to 0.4.1.73, update to version 0.4.1.73 or later to resolve the issue.