A vulnerability in the FreeLAN 2.2 Windows service configuration allows local attackers to achieve privilege escalation by exploiting an unquoted service path.

The application is susceptible to an unquoted service path vulnerability (CWE-428) where the service binary path lacks proper quotation marks. This allows a local attacker to place a malicious executable in a directory that the service path traverses, resulting in code execution with LocalSystem privileges upon service startup.

The ability for a local attacker to gain LocalSystem privileges represents a total compromise of the affected host. This vulnerability could allow an attacker to bypass security controls, install persistent backdoors, or access sensitive data across the system. Given the CVSS score of 7.8, this flaw poses a significant risk to the confidentiality, integrity, and availability of any system running the vulnerable software.

Immediate Action: Since no specific patch is identified in the provided data, administrators should manually move the FreeLAN service binary to a secure location or apply proper quotation marks to the registry path for the "FreeLAN Service" to prevent unauthorized binary hijacking.

Proactive Monitoring: Monitor Windows Event Logs for unexpected service startup failures or the creation of new, unrecognized executables within the "C:\Program Files" directory structure.

Compensating Controls: Restrict local user write permissions on the "C:\Program Files" and "C:\Program Files\FreeLAN" directories to prevent unauthorized binary placement.

Public Exploit Available: Yes — a public proof-of-concept exploit is available via ExploitDB (EDB-ID: 49630).

This vulnerability presents a high risk due to the potential for full system compromise via privilege escalation. Organizations currently running FreeLAN 2.2 must prioritize restricting filesystem access to the application directories as a primary defense. Until a vendor-supplied patch is confirmed, manual remediation of the service path configuration is essential to neutralize this attack vector.