CVE-2008-0074

CWE-2643 documents3 sources

Severity

7.2HIGH

EPSS

1.6%

top 18.46%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Microsoft Internet Information Server Microsoft Internet Information Services

Timeline

PublishedFeb 12

Latest updateMay 1

Description

Unspecified vulnerability in Microsoft Internet Information Services (IIS) 5.0 through 7.0 allows local users to gain privileges via unknown vectors related to file change notifications in the TPRoot, NNTPFile\Root, or WWWRoot folders.

CVSS vector

AV:L/AC:L/C:C/I:C/A:CExploitability: 3.9 | Impact: 10.0

Affected Packages2 packages

▶NVDmicrosoft/internet_information_services5.0

▶NVDmicrosoft/internet_information_server6.0

🔴Vulnerability Details

GHSA

GHSA-245j-mh2w-xmfx: Unspecified vulnerability in Microsoft Internet Information Services (IIS) 5↗2022-05-01

▶

CVEList

CVE-2008-0074: Unspecified vulnerability in Microsoft Internet Information Services (IIS) 5↗2008-02-12

▶