PT-2006-7181 · Microsoft · Windows Xp

Publicado 2006-12-15 · Atualizado 2020-11-23 · CVE-2006-6579

Positive Technologies (AI Summary)

CVSS v2.0

4.4

Média

Vetor base

AV:L/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Windows XP version

Description The issue is related to weak permissions for the %WINDIR%pchealthERRORREPQHEADLES folder, which allows local users to write and read files in this folder. This is demonstrated by an ASP shell that has write access by IWAM machine and read access by IUSR Machine.

Recommendations For Microsoft Windows XP, consider restricting access to the %WINDIR%pchealthERRORREPQHEADLES folder to prevent local users from writing and reading files. As a temporary workaround, consider disabling write access to the %WINDIR%pchealthERRORREPQHEADLES folder for the IWAM machine user and read access for the IUSR Machine user until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2006-6579

Produtos afetados

Windows Xp

Referências · 4

• https://t.me/cvenotify/6036 · Publicação no Telegram
• http://securityfocus.com/archive/1/454268/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-6579 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6579 · Nota