CVE-2014-5507

iBackup Local Privilege Escalation (CVE-2014-5507) affects Windows installations of iBackup up to version 10.0.0.32. The root cause is weak permissions on the ib_service.exe binary (Everyone: Full Control), allowing a local user to replace the service executable with a Trojan horse. When the serv...