CVE-2006-6578
Severity:
Pending analysis
Type:
Unavailable / Other
Publication date:
15/12/2006
Last modified:
08/12/2020
Description
Microsoft Internet Information Services (IIS) 5.1 permits the IUSR_Machine account to execute non-EXE files such as .COM files, which allows attackers to execute arbitrary commands via arguments to any .COM file that executes those arguments, as demonstrated using win.com when it is in a web directory with certain permissions.
Impact
Base Score 2.0
7.50
Severity 2.0
HIGH
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:a:microsoft:internet_information_services:5.1:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page