A local privilege escalation vulnerability in Quick 'n Easy FTP Service 3.2 allows attackers to execute arbitrary code with system-level privileges.

The application utilizes an unquoted service path for its main executable, which allows a local attacker with standard user privileges to hijack the service execution flow by placing a malicious binary in a higher-level directory within the path. When the service starts or restarts with LocalSystem privileges, it executes the attacker-controlled binary instead of the intended application.

Successful exploitation of this vulnerability results in full system compromise, as the attacker gains the ability to run arbitrary code with LocalSystem privileges. Given the CVSS score of 7.8, this represents a high-risk scenario where an attacker can install software, modify data, or create new accounts with full administrative rights, leading to a complete loss of confidentiality, integrity, and availability for the affected host.

Immediate Action: As no official patch is currently available, administrators should manually modify the Windows Registry to wrap the service path in quotes or move the service binary to a directory path that does not contain spaces.

Proactive Monitoring: Monitor system logs for unauthorized service configuration changes and audit the creation of new executable files within the C:\Program Files\ directory tree.

Compensating Controls: Restrict local user permissions to prevent the modification of service directories and the creation of files in the root or parent directories of the service path.

Public Exploit Available: Yes, a local exploit is documented on Exploit-DB (EDB-ID 48983).

Due to the high severity of this privilege escalation flaw and the availability of public exploit material, it is imperative that organizations using Quick 'n Easy FTP Service 3.2 take immediate manual steps to secure the service path. Failure to mitigate this vulnerability exposes the host to full administrative compromise by any local user. If the software is not critical to business operations, consider uninstalling it until a vendor-provided security update is released.