CVE-2006-6579: Medium severity microsoft internet information server vulnerability
Microsoft Windows XP has weak permissions (FILEWRITEDATA and FILEREADDATA for Everyone) for %WINDIR%\pchealth\ERRORREP\QHEADLES, which allows local users to write and read files in this folder, as demonstrated by an ASP shell that has write access by IWAMmachine and read access by IUSRMachine.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-6579?
CVE-2006-6579 has a low to medium severity rating due to weak permissions that allow local users unauthorized access to files.
How do I fix CVE-2006-6579?
To mitigate CVE-2006-6579, change the permissions on the %WINDIR%\pchealth\ERRORREP\QHEADLES folder to restrict access from the Everyone group.
What versions of Microsoft software are affected by CVE-2006-6579?
CVE-2006-6579 affects multiple versions of Microsoft Internet Information Server and Microsoft Internet Information Services.
Can CVE-2006-6579 lead to remote code execution?
CVE-2006-6579 does not directly lead to remote code execution, but it could enable an attacker to manipulate files which may facilitate other attacks.
Is CVE-2006-6579 applicable only to outdated systems?
Yes, CVE-2006-6579 primarily affects older systems such as Windows XP and older versions of Internet Information Server software.