CVE-2006-6579

published 2006-12-15

CVE-2006-6579: Microsoft Windows XP has weak permissions (FILE_WRITE_DATA and FILE_READ_DATA for Everyone) for %WINDIR%\pchealth\ERRORREP\QHEADLES, which allows local users…

medium 4.4 CVSS 3.1

AV L AC M Au N C P I P A P

Microsoft Windows XP has weak permissions (FILE_WRITE_DATA and FILE_READ_DATA for Everyone) for %WINDIR%\pchealth\ERRORREP\QHEADLES, which allows local users to write and read files in this folder, as demonstrated by an ASP shell that has write access by IWAM_machine and read access by IUSR_Machine.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
microsoft	internet_information_server	<= 5.0	—
microsoft	internet_information_server	—	—
microsoft	internet_information_server	—	—
microsoft	internet_information_services	—	—
microsoft	internet_information_services	—	—