CVE Number | Vulnerability | Product | Severity | Date |
---|---|---|---|---|
MS08-005 | Vulnerability in Internet Information Services Could Allow Elevation of Privilege (942831) | Microsoft Windows | Critical | 13-02-2008 |
Technical Information
Brief overview of the risk:
A local elevation of privilege vulnerability exists in the way that the Internet Information Service handles file change notifications in the FTPRoot, NNTPFileRoot, and WWWRoot folders.
Detailed Information on the risk:
An attacker who successfully exploited this vulnerability could execute arbitrary code in the context of local system. An attacker could then install programs; view, change, or delete data; or create new accounts with full administrative rights.Further information on this exploit is available at : MS08-005
Affected Software
Microsoft Windows 2000 Service Pack 4Windows XP Professional Service Pack 2
Windows XP Professional x64 Edition and Windows XP Professional x64 Edition Service Pack 2
Windows Server 2003 Service Pack 1 and Windows Server 2003 Service Pack 2
Windows Server 2003 x64 Edition and Windows Server 2003 x64 Edition Service Pack 2
Windows Server 2003 with SP1 for Itanium-based Systems and Windows Server 2003 with SP2 for Itanium-based Systems
Windows Vista
Windows Vista x64 Edition