CVEvulnerability
CVE-2007-0843
4.6 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-02-23
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
The ReadDirectoryChangesW API function on Microsoft Windows 2000, XP, Server 2003, and Vista does not check permissions for child objects, which allows local users to bypass permissions by opening a directory with LIST (READ) access and using ReadDirectoryChangesW to monitor changes of files that do not have LIST permissions, which can be leveraged to determine filenames, access times, and other sensitive information.
Affected configurations
• microsoft windows 2000
• microsoft windows 2003 server
• microsoft windows vista
• microsoft windows xp
Related
Weakness · not in database (1)
References
- http://lists.grok.org.uk/pipermail/full-disclosure/2007-February/052613.html lists.grok.org.uk
- http://osvdb.org/33474 osvdb.org
- http://packetstormsecurity.com/files/163755/Microsoft-Windows-Malicious-Software-Removal-Tool-Privilege-Escalation.html packetstormsecurity.com
- http://secunia.com/advisories/24245 Vendor Advisory
- http://securityreason.com/securityalert/2282 securityreason.com
- http://securityvulns.com/advisories/readdirectorychanges.asp Vendor Advisory
- http://www.securityfocus.com/archive/1/460887/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/460899/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/22664 Exploit
- http://www.vupen.com/english/advisories/2007/0701 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32644 exchange.xforce.ibmcloud.com
- http://lists.grok.org.uk/pipermail/full-disclosure/2007-February/052613.html lists.grok.org.uk
- http://osvdb.org/33474 osvdb.org
- http://packetstormsecurity.com/files/163755/Microsoft-Windows-Malicious-Software-Removal-Tool-Privilege-Escalation.html packetstormsecurity.com
- http://secunia.com/advisories/24245 Vendor Advisory
- http://securityreason.com/securityalert/2282 securityreason.com
- http://securityvulns.com/advisories/readdirectorychanges.asp Vendor Advisory
- http://www.securityfocus.com/archive/1/460887/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/460899/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/22664 Exploit
- http://www.vupen.com/english/advisories/2007/0701 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32644 exchange.xforce.ibmcloud.com