Lucene search

[email protected]CVE-2006-6579

HistoryDec 15, 2006 - 7:28 p.m.

CVE-2006-6579

2006-12-1519:28:00

[email protected]

web.nvd.nist.gov

microsoft

windows

permissions

vulnerability

pchealth

errorrep

qheadles

nvd

4.4 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

6.5 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

30.3%

JSON

Microsoft Windows XP has weak permissions (FILE_WRITE_DATA and FILE_READ_DATA for Everyone) for %WINDIR%\pchealth\ERRORREP\QHEADLES, which allows local users to write and read files in this folder, as demonstrated by an ASP shell that has write access by IWAM_machine and read access by IUSR_Machine.

Affected configurations

NVD

Node

microsoftinternet_information_serverRange≤5.0

microsoftinternet_information_serverMatch3.0

microsoftinternet_information_serverMatch4.0

microsoftinternet_information_serverMatch4.0alpha

microsoftinternet_information_servicesMatch1.0

microsoftinternet_information_servicesMatch2.0

CPENameOperatorVersion
microsoft:internet_information_servermicrosoft internet information serverle5.0
microsoft:internet_information_servermicrosoft internet information servereq3.0
microsoft:internet_information_servermicrosoft internet information servereq4.0
microsoft:internet_information_servicesmicrosoft internet information serviceseq1.0
microsoft:internet_information_servicesmicrosoft internet information serviceseq2.0

CPE	Name	Operator	Version
microsoft:internet_information_server	microsoft internet information server	le	5.0
microsoft:internet_information_server	microsoft internet information server	eq	3.0
microsoft:internet_information_server	microsoft internet information server	eq	4.0
microsoft:internet_information_services	microsoft internet information services	eq	1.0
microsoft:internet_information_services	microsoft internet information services	eq	2.0

References

www.securityfocus.com/archive/1/454268/100/0/threaded

4.4 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

6.5 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

30.3%

JSON

Related for CVE-2006-6579

nvd1 cvelist1