CVE-2008-0074
First published: Tue Feb 12 2008(Updated: )
Unspecified vulnerability in Microsoft Internet Information Services (IIS) 5.0 through 7.0 allows local users to gain privileges via unknown vectors related to file change notifications in the TPRoot, NNTPFile\Root, or WWWRoot folders.
Credit: secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Internet Information Services | =6.0 | |
| Microsoft Internet Information Services (IIS) | =5.0 | |
| Microsoft Internet Information Services | =6.0-beta |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.us-cert.gov/cas/techalerts/TA08-043C.html
- http://www.securityfocus.com/bid/27101
- http://www.securitytracker.com/id?1019384
- http://secunia.com/advisories/28849
- http://marc.info/?l=bugtraq&m=120361015026386&w=2
- http://www.vupen.com/english/advisories/2008/0507/references
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5389
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-005
Frequently Asked Questions
What is the severity of CVE-2008-0074?
CVE-2008-0074 is considered a high severity vulnerability.
How do I fix CVE-2008-0074?
To fix CVE-2008-0074, apply the latest security patches provided by Microsoft for Internet Information Services.
What software versions are affected by CVE-2008-0074?
CVE-2008-0074 affects Microsoft Internet Information Services versions 5.0, 6.0, and 6.0-beta.
Can CVE-2008-0074 allow unauthorized access?
Yes, CVE-2008-0074 can allow local users to gain elevated privileges on the affected systems.
What are the potential impacts of CVE-2008-0074?
The potential impacts of CVE-2008-0074 include unauthorized access and control over sensitive files and directories.
- agent/weakness
- agent/type
- agent/references
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/severity
- agent/author
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/microsoft
- canonical/microsoft internet information services
- version/microsoft internet information services/6.0
- canonical/microsoft internet information services (iis)
- version/microsoft internet information services (iis)/5.0
- version/microsoft internet information services/6.0-beta