CVE-2020-17381

https://notcve.org/view.php?id=CVE-2020-17381

21 Oct 2020 — An issue was discovered in Ghisler Total Commander 9.51. Due to insufficient access restrictions in the default installation directory, an attacker can elevate privileges by replacing the %SYSTEMDRIVE%\totalcmd\TOTALCMD64.EXE binary. Se detectó un problema en Ghisler Total Commander versión 9.51. Debido a restricciones de acceso insuficientes en el directorio de instalación predeterminado, un atacante puede elevar los privilegios al reemplazar el binario %SYSTEMDRIVE%\totalcmd\TOTALCMD64.EXE • https://github.com/OffensiveOceloot/advisories/blob/main/CVE-2020-17381.md • CWE-276: Incorrect Default Permissions •