CVE-2008-0074

Unspecified vulnerability in Microsoft Internet Information Services (IIS) 5.0 through 7.0 allows local users to gain privileges via unknown vectors related to file change notifications in the TPRoot, NNTPFile\Root, or WWWRoot folders.

Score

CVSS 2.0 7.2 High

Status

Modified - secure@microsoft.com

Published

2008-02-12

Last modified

2024-08-07

Weaknesses

CWE-264

Affected products

• Internet Information Server (Microsoft)
• Internet Information Services (Microsoft)

References

• http://marc.info/?l=bugtraq&m=120361015026386&w=2
• http://secunia.com/advisories/28849
• http://www.securityfocus.com/bid/27101
• http://www.securitytracker.com/id?1019384
• http://www.us-cert.gov/cas/techalerts/TA08-043C.html
• http://www.vupen.com/english/advisories/2008/0507/references
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-005
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5389