A critical unquoted service path vulnerability in Cain & Abel 4.9.56 allows local attackers to escalate privileges to LocalSystem, posing a severe risk to system integrity.

This is an unquoted search path vulnerability (CWE-428) where the service binary path lacks proper quotation marks. A local attacker with low-level permissions can place a malicious executable in a parent directory, which the service will then execute with LocalSystem privileges upon restart.

Successful exploitation grants an attacker full administrative control over the affected host, leading to complete system compromise. Given the CVSS score of 8.4, this vulnerability represents a high risk of unauthorized data access, persistence, and lateral movement within the network.

Immediate Action: Upgrade to the latest version of the software if available, or manually rectify the service path by adding quotes to the binary path in the Windows Registry (HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services).

Proactive Monitoring: Review Windows System event logs for unexpected service restarts or new, unauthorized binaries appearing in the C:\Program Files (x86) or C:\Program Files directories.

Compensating Controls: Restrict write access to directory paths where system services are installed to prevent unauthorized users from placing malicious executables.

Public Exploit Available: Yes, a proof-of-concept exists as documented in the Exploit-DB entry 50728.

The severity of this vulnerability, combined with the availability of a published proof-of-concept, necessitates immediate remediation. Administrators should prioritize correcting the service path configuration to prevent potential privilege escalation by local attackers.