CVE-2006-6579
Severity:
Pending analysis
Type:
Unavailable / Other
Publication date:
15/12/2006
Last modified:
23/11/2020
Description
Microsoft Windows XP has weak permissions (FILE_WRITE_DATA and FILE_READ_DATA for Everyone) for %WINDIR%\pchealth\ERRORREP\QHEADLES, which allows local users to write and read files in this folder, as demonstrated by an ASP shell that has write access by IWAM_machine and read access by IUSR_Machine.
Impact
Base Score 2.0
4.40
Severity 2.0
MEDIUM
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:* | 5.0 (including) | |
cpe:2.3:a:microsoft:internet_information_server:3.0:*:*:*:*:*:*:* | ||
cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:* | ||
cpe:2.3:a:microsoft:internet_information_server:4.0:alpha:*:*:*:*:*:* | ||
cpe:2.3:a:microsoft:internet_information_services:1.0:*:*:*:*:*:*:* | ||
cpe:2.3:a:microsoft:internet_information_services:2.0:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page