EIP-2026-117487

This is a technical writeup demonstrating an unquoted service path vulnerability in Microsoft Exchange Server 2013 SP1's MSExchangeADTopology service. The vulnerability could allow local privilege escalation if an attacker can place a malicious executable in a path with spaces.