CVE-2006-6579: Microsoft Internet Information Server

Medium severity, CVSS 4.4. EPSS: 1.4% chance of exploitation in the next 30 days.

Microsoft Windows XP has weak permissions (FILE_WRITE_DATA and FILE_READ_DATA for Everyone) for %WINDIR%\pchealth\ERRORREP\QHEADLES, which allows local users to write and read files in this folder, as demonstrated by an ASP shell that has write access by IWAM_machine and read access by IUSR_Machine.

Affected products

• Microsoft Internet Information Server: up to and including 5.0; version 3.0 only; version 4.0 only
• Microsoft Internet Information Services: version 1.0 only; version 2.0 only

Published 2006-12-15. Last modified 2026-06-16.