CVEvulnerability
CVE-2006-0023
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-02-08
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:L/AC:L/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
Microsoft Windows XP SP1 and SP2 before August 2004, and possibly other operating systems and versions, uses insecure default ACLs that allow the Authenticated Users group to gain privileges by modifying critical configuration information for the (1) Simple Service Discovery Protocol (SSDP), (2) Universal Plug and Play Device Host (UPnP), (3) NetBT, (4) SCardSvr, (5) DHCP, and (6) DnsCache services, aka "Permissive Windows Services DACLs." NOTE: the NetBT, SCardSvr, DHCP, DnsCache already require privileged access to exploit.
Affected configurations
• microsoft windows xp
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/18756 Patch, Vendor Advisory
- http://secunia.com/advisories/19238 Vendor Advisory
- http://secunia.com/advisories/19313 Vendor Advisory
- http://securitytracker.com/id?1015595 securitytracker.com
- http://securitytracker.com/id?1015765 securitytracker.com
- http://support.avaya.com/elmodocs2/security/ASA-2006-069.htm support.avaya.com
- http://www.cs.princeton.edu/~sudhakar/papers/winval.pdf www.cs.princeton.edu
- http://www.kb.cert.org/vuls/id/953860 Third Party Advisory, US Government Resource
- http://www.microsoft.com/technet/security/advisory/914457.mspx Vendor Advisory
- http://www.securityfocus.com/archive/1/423587/100/0/threaded www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/0417 Vendor Advisory
- http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?cscat=BLTNDETAIL&DocumentOID=391523&RenditionID= www130.nortelnetworks.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-011 docs.microsoft.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24463 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1671 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1696 oval.cisecurity.org
- http://secunia.com/advisories/18756 Patch, Vendor Advisory
- http://secunia.com/advisories/19238 Vendor Advisory
- http://secunia.com/advisories/19313 Vendor Advisory
- http://securitytracker.com/id?1015595 securitytracker.com
- http://securitytracker.com/id?1015765 securitytracker.com
- http://support.avaya.com/elmodocs2/security/ASA-2006-069.htm support.avaya.com
- http://www.cs.princeton.edu/~sudhakar/papers/winval.pdf www.cs.princeton.edu
- http://www.kb.cert.org/vuls/id/953860 Third Party Advisory, US Government Resource
- http://www.microsoft.com/technet/security/advisory/914457.mspx Vendor Advisory
- http://www.securityfocus.com/archive/1/423587/100/0/threaded www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/0417 Vendor Advisory
- http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?cscat=BLTNDETAIL&DocumentOID=391523&RenditionID= www130.nortelnetworks.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-011 docs.microsoft.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24463 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1671 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1696 oval.cisecurity.org