CVE-2007-0843

Microsoft Windows XP/2003 - ReadDirectoryChangesW Information Disclosure

Severity Score

4.6

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

The ReadDirectoryChangesW API function on Microsoft Windows 2000, XP, Server 2003, and Vista does not check permissions for child objects, which allows local users to bypass permissions by opening a directory with LIST (READ) access and using ReadDirectoryChangesW to monitor changes of files that do not have LIST permissions, which can be leveraged to determine filenames, access times, and other sensitive information.

La función de la API ReadDirectoryChangesW en Microsoft Windows 2000, XP, Server 2003 y Vista no comprueba los permisos para los objetos secundarios, lo que permite a los usuarios locales omitir los permisos mediante la apertura de un directorio con acceso LIST (READ) y utilizando ReadDirectoryChangesW para monitorizar los cambios de los archivos, que no tiene permisos de LISTA, lo que puede explotarse para determinar los nombres de archivos, tiempos de acceso y otra información confidencial.

*Credits: N/A

CVSS Scores

NISTv2 4.6

Attack Vector

Local

Attack Complexity

Low

Authentication

None

Confidentiality

Partial

Integrity

Partial

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2007-02-07 CVE Reserved
2007-02-22 First Exploit
2007-02-23 CVE Published
2023-07-08 EPSS Updated
2024-08-07 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date

CWE

CWE-264: Permissions, Privileges, and Access Controls

CAPEC

References (12)

URL	Tag	Source
http://lists.grok.org.uk/pipermail/full-disclosure/2007-February/052613.html	Mailing List
http://osvdb.org/33474	Vdb Entry
http://packetstormsecurity.com/files/163755/Microsoft-Windows-Malicious-Software-Removal-Tool-Privilege-Escalation.html	X_refsource_misc
http://securityreason.com/securityalert/2282	Third Party Advisory
http://www.securityfocus.com/archive/1/460887/100/0/threaded	Mailing List
http://www.securityfocus.com/archive/1/460899/100/0/threaded	Mailing List
https://exchange.xforce.ibmcloud.com/vulnerabilities/32644	Vdb Entry

URL	Date	SRC
https://www.exploit-db.com/exploits/29630	2007-02-22
http://www.securityfocus.com/bid/22664	2024-08-07

URL	Date	SRC

URL	Date	SRC
http://secunia.com/advisories/24245	2021-08-09
http://securityvulns.com/advisories/readdirectorychanges.asp	2021-08-09
http://www.vupen.com/english/advisories/2007/0701	2021-08-09

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Microsoft Search vendor "Microsoft"		Windows 2000 Search vendor "Microsoft" for product "Windows 2000"				*		-		Affected
Microsoft Search vendor "Microsoft"		Windows 2003 Server Search vendor "Microsoft" for product "Windows 2003 Server"				*		-		Affected
Microsoft Search vendor "Microsoft"		Windows Vista Search vendor "Microsoft" for product "Windows Vista"				*		beta1		Affected
Microsoft Search vendor "Microsoft"		Windows Xp Search vendor "Microsoft" for product "Windows Xp"				*		home		Affected
Microsoft Search vendor "Microsoft"		Windows Xp Search vendor "Microsoft" for product "Windows Xp"				*		gold		Affected
Microsoft Search vendor "Microsoft"		Windows Xp Search vendor "Microsoft" for product "Windows Xp"				*		sp1, 64-bit_2003		Affected
Microsoft Search vendor "Microsoft"		Windows Xp Search vendor "Microsoft" for product "Windows Xp"				*		sp1, embedded		Affected
Microsoft Search vendor "Microsoft"		Windows Xp Search vendor "Microsoft" for product "Windows Xp"				*		sp1, home		Affected
Microsoft Search vendor "Microsoft"		Windows Xp Search vendor "Microsoft" for product "Windows Xp"				*		sp1, media_center		Affected
Microsoft Search vendor "Microsoft"		Windows Xp Search vendor "Microsoft" for product "Windows Xp"				*		sp1, professional		Affected
Microsoft Search vendor "Microsoft"		Windows Xp Search vendor "Microsoft" for product "Windows Xp"				*		sp1, tablet_pc		Affected
Microsoft Search vendor "Microsoft"		Windows Xp Search vendor "Microsoft" for product "Windows Xp"				*		sp2, home		Affected
Microsoft Search vendor "Microsoft"		Windows Xp Search vendor "Microsoft" for product "Windows Xp"				*		sp2, media_center		Affected
Microsoft Search vendor "Microsoft"		Windows Xp Search vendor "Microsoft" for product "Windows Xp"				*		sp2, professional		Affected
Microsoft Search vendor "Microsoft"		Windows Xp Search vendor "Microsoft" for product "Windows Xp"				*		sp2, tablet_pc		Affected