Microsoft Windows XP has weak permissions (FILE_WRITE_DATA and FILE_READ_DATA for Everyone) for %WINDIR%pchealthERRORREPQHEADLES, which allows local users to write and read files in this folder, as demonstrated by an ASP shell that has write access by IWAM_machine and read access by IUSR_Machine.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Internet_information_server | Microsoft | * | 5.0 (including) |
| Internet_information_server | Microsoft | 3.0 (including) | 3.0 (including) |
| Internet_information_server | Microsoft | 4.0 (including) | 4.0 (including) |
| Internet_information_server | Microsoft | 4.0-alpha (including) | 4.0-alpha (including) |
| Internet_information_services | Microsoft | 1.0 (including) | 1.0 (including) |
| Internet_information_services | Microsoft | 2.0 (including) | 2.0 (including) |