medium4.4
CVE-2006-6579
Microsoft Windows XP has weak permissions (FILE_WRITE_DATA and FILE_READ_DATA for Everyone) for %WINDIR%\pchealth\ERRORREP\QHEADLES, which allows local users t…
Impact
Microsoft Windows XP has weak permissions (FILE_WRITE_DATA and FILE_READ_DATA for Everyone) for %WINDIR%\pchealth\ERRORREP\QHEADLES, which allows local users to write and read files in this folder, as demonstrated by an ASP shell that has write access by IWAM_machine and read access by IUSR_Machine.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Internet Information Server | through 5.0 Versions 3.0, 4.0 |
| Microsoft | Internet Information Services | Versions 1.0, 2.0 |