Cobian Backup Unquoted Service Path Vulnerability Allowing Arbitrary Code Execution

An unquoted service path vulnerability has been identified in Cobian Backup version 0.9.93. This vulnerability allows local users to execute arbitrary code with elevated privileges. The issue arises from the unquoted binary path of the CobianReflectorService, which can be exploited to inject malicious code that executes with LocalSystem permissions when the service starts.

Impact

Exploitation of this vulnerability could lead to unauthorized execution of code with elevated system privileges, allowing local users to perform actions with the rights of the LocalSystem account.

Reproduction

To reproduce this vulnerability, a local user must be able to place their code in the system root path without detection by the operating system or security applications. Once the code is in place, it can be executed during the startup of Cobian Backup's service, CobianReflectorService, which runs under the LocalSystem account.