Microsoft Windows Unquoted Service Path Enumeration
Medium Nessus Plugin ID 63155
Synopsis
The remote Windows host has at least one service installed that uses an unquoted service path.
Description
The remote Windows host has at least one service installed that uses an unquoted service path, which contains at least one whitespace. A local attacker can gain elevated privileges by inserting an executable file in the path of the affected service.
Note that this is a generic test that will flag any application affected by the described vulnerability.
Solution
Ensure that any services that contain a space in the path enclose the path in quotes.