ActiveFax Server Unquoted Service Path Vulnerability in ActiveFaxServiceNT

A vulnerability exists in ActiveFax Server version 6.92 Build 0316, specifically within the ActiveFaxServiceNT service. This vulnerability arises from an unquoted service path, which local attackers could exploit to execute arbitrary code. By injecting malicious executables into the unquoted binary path, attackers may execute these files with elevated administrative privileges.

Impact

Exploitation of this vulnerability could lead to arbitrary code execution with administrative rights.

Reproduction

The vulnerability can be reproduced by querying the service configuration of 'ActiveFaxServiceNT' using the Service Control Manager (SC) command. The unquoted binary path can then be exploited by placing a malicious executable in a location that the service will execute with elevated privileges.