A library Windows service uses an unquoted binary path containing spaces, and an intermediate folder is writable by the foothold user. What misconfiguration class is this?
Select an answer to reveal the explanation.
Short Explanation
Unquoted paths with spaces are the Windows equivalent of a confusing street address—the OS may knock on the wrong door first. If you can write to an earlier folder in that path, you get a classic service misconfig lead. It is about path parsing, not DNS or SMBv1.
Full Explanation
When a service ImagePath is unquoted and contains spaces, Windows may attempt to execute intermediate name candidates before the intended binary. A writable directory at one of those segments creates a well-documented local privilege-escalation class. The issue is about service path parsing and ACLs, not DNS cache poisoning, SMBv1 policy, or browser certificate pinning. Enumerate service paths and folder rights together.