CVE-2006-0023
- State
- Published
- Severity
- Not scored
- Published
- Feb 8, 2006
- Updated
- Aug 7, 2024
- Reserved
- Nov 30, 2005
Description
Microsoft Windows XP SP1 and SP2 before August 2004, and possibly other operating systems and versions, uses insecure default ACLs that allow the Authenticated Users group to gain privileges by modifying critical configuration information for the (1) Simple Service Discovery Protocol (SSDP), (2) Universal Plug and Play Device Host (UPnP), (3) NetBT, (4) SCardSvr, (5) DHCP, and (6) DnsCache services, aka "Permissive Windows Services DACLs." NOTE: the NetBT, SCardSvr, DHCP, DnsCache already require privileged access to exploit.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 19313third-party-advisory
- oval:org.mitre.oval:def:1671vdb-entrysignature
- 1015765vdb-entry
- http://support.avaya.com/elmodocs2/security/ASA-2006-069.htm
- 19238third-party-advisory
- 20060131 Windows Access Control Demystifiedmailing-list
- VU#953860third-party-advisory
- http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?cscat=BLTNDETAIL&DocumentOID=391523&RenditionID=
- http://www.cs.princeton.edu/~sudhakar/papers/winval.pdf
- win-auth-users-insecure-permissions(24463)vdb-entry
- 18756third-party-advisory
- MS06-011vendor-advisory
- oval:org.mitre.oval:def:1696vdb-entrysignature
- http://www.microsoft.com/technet/security/advisory/914457.mspx
- 1015595vdb-entry
- ADV-2006-0417vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.