CVE-2006-6578 | BDVDB-2026-20973 Detail

Description#

Microsoft Internet Information Services (IIS) 5.1 permits the IUSR_Machine account to execute non-EXE files such as .COM files, which allows attackers to execute arbitrary commands via arguments to any .COM file that executes those arguments, as demonstrated using win.com when it is in a web directory with certain permissions.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://securityreason.com/securityalert/2036
http://www.securityfocus.com/archive/1/454268/100/0/threaded

Exploit#

No public exploit known

History#

Version 12006-12-15Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.