CVE-2006-6579

Published: Dec 15, 2006Modified: Apr 23, 2026

4.4

Vector

AV:L/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 3.4 / Impact: 6.4

Source: NVD

Description

Microsoft Windows XP has weak permissions (FILE_WRITE_DATA and FILE_READ_DATA for Everyone) for %WINDIR%\pchealth\ERRORREP\QHEADLES, which allows local users to write and read files in this folder, as demonstrated by an ASP shell that has write access by IWAM_machine and read access by IUSR_Machine.

Affected (6)

Products: Microsoft: Internet Information Server, Internet Information Services

Microsoft

2 products

Internet Information Server

Internet Information Services

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Microsoft Internet Information Server	Up to 5.0
Microsoft Internet Information Server	Version 3.0
Microsoft Internet Information Server	Version 4.0
Microsoft Internet Information Server	Version 4.0 alpha
Microsoft Internet Information Services	Version 1.0
Microsoft Internet Information Services	Version 2.0

References (2)

http://www.securityfocus.com/archive/1/454268/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/454268/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.