CVE-2008-0074

Microsoft Internet Information Services 5.0-7.0 - Local Privilege Escalation via File Change Notifications

Title source: llm
STIX 2.1

Description

Unspecified vulnerability in Microsoft Internet Information Services (IIS) 5.0 through 7.0 allows local users to gain privileges via unknown vectors related to file change notifications in the TPRoot, NNTPFile\Root, or WWWRoot folders.

References (8)

Core 8
Core References
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2008/0507/references
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5389
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1019384
Mailing List vendor-advisory x_refsource_hp
http://marc.info/?l=bugtraq&m=120361015026386&w=2
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/27101
US Government Resource third-party-advisory x_refsource_cert
http://www.us-cert.gov/cas/techalerts/TA08-043C.html
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/28849

Scores

EPSS 0.0597
EPSS Percentile 92.6%

Details

CWE
CWE-264
Status published
Products (2)
microsoft/internet_information_server 6.0 (2 CPE variants)
microsoft/internet_information_services 5.0
Published Feb 12, 2008
Tracked Since Feb 18, 2026