Skip to content
OpenAdvisories
Unscored CVE-2006-6579 EUVD-2006-6562GHSA-pw4c-rvwh-9f35

Microsoft Windows XP has weak permissions (FILE_WRITE_DATA and FILE_READ_DATA for Everyone) for %WINDIR%\pchealth\ERRORREP\QHEADLES, which …

Published Dec 15, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Microsoft Windows XP has weak permissions (FILE_WRITE_DATA and FILE_READ_DATA for Everyone) for %WINDIR%\pchealth\ERRORREP\QHEADLES, which allows local users to write and read files in this folder, as demonstrated by an ASP shell that has write access by IWAM_machine and read access by IUSR_Machine.

References