CVE-2006-6578

Microsoft Internet Information Services (IIS) 5.1 permits the IUSR_Machine account to execute non-EXE files such as .COM files, which allows attackers to execute arbitrary commands via arguments to any .COM file that executes those arguments, as demonstrated using win.com when it is in a web directory with certain permissions.

CVSS v2.0 7.5 HIGH

7.5^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://securityreason.com/securityalert/2036	Exploit Third Party Advisory
http://www.securityfocus.com/archive/1/454268/100/0/threaded	Exploit Third Party Advisory VDB Entry
http://securityreason.com/securityalert/2036	Exploit Third Party Advisory
http://www.securityfocus.com/archive/1/454268/100/0/threaded	Exploit Third Party Advisory VDB Entry

Configurations

Configuration 1 (hide)

cpe:2.3:a:microsoft:internet_information_services:5.1:*:*:*:*:*:*:*

History

21 Nov 2024, 00:23

Type	Values Removed	Values Added
References	~~() http://securityreason.com/securityalert/2036 - Exploit, Third Party Advisory~~	() http://securityreason.com/securityalert/2036 - Exploit, Third Party Advisory
References	~~() http://www.securityfocus.com/archive/1/454268/100/0/threaded - Exploit, Third Party Advisory, VDB Entry~~	() http://www.securityfocus.com/archive/1/454268/100/0/threaded - Exploit, Third Party Advisory, VDB Entry

Information

Published : 2006-12-15 19:28

Updated : 2024-11-21 00:23

NVD link : CVE-2006-6578

Mitre link : CVE-2006-6578

CVE.ORG link : CVE-2006-6578

JSON object : View

Products Affected

microsoft

internet_information_services

CWE

NVD-CWE-noinfo

{"id": "CVE-2006-6578", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": false}]}, "published": "2006-12-15T19:28:00.000", "references": [{"url": "http://securityreason.com/securityalert/2036", "tags": ["Exploit", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/archive/1/454268/100/0/threaded", "tags": ["Exploit", "Third Party Advisory", "VDB Entry"], "source": "cve@mitre.org"}, {"url": "http://securityreason.com/securityalert/2036", "tags": ["Exploit", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/archive/1/454268/100/0/threaded", "tags": ["Exploit", "Third Party Advisory", "VDB Entry"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Microsoft Internet Information Services (IIS) 5.1 permits the IUSR_Machine account to execute non-EXE files such as .COM files, which allows attackers to execute arbitrary commands via arguments to any .COM file that executes those arguments, as demonstrated using win.com when it is in a web directory with certain permissions."}, {"lang": "es", "value": "Microsoft Internet Information Services (IIS) 5.1 permite a la cuenta IUSR_Machine ejecutar archivos no-EXE as\u00ed como archivos .COM, lo cual permite a un atacante remoto ejecutar comandos de su elecci\u00f3n a trav\u00e9s de argumentos a cualquier archivo .COM que ejecute esos argumentos, como se demostr\u00f3 usando win.com cuando est\u00e1 en un directorio web con ciertos permisos."}], "lastModified": "2024-11-21T00:23:01.533", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:microsoft:internet_information_services:5.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "25100F8C-58A0-49D5-8247-8CCD099A734B"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}