Servers and applications
CVE-2008-0074
Unspecified vulnerability in Microsoft Internet Information Services (IIS) 5.0 through 7.0 allows local users to gain privileges via unknown vectors related to file change notifications in the TPRoot, NNTPFile\Root, or WWWRoot folders.
- Severity
- High 7.2
- Published
- 12 Feb 2008
- Last changed
- 16 Jun 2026
- Added to UpHeron
- 21 Oct 2026
- Exploit chance
- 5.4% in the next 30 daysHigher than 92% of CVEs. EPSS by FIRST, 12 Nov 2026
- Weakness
- CWE-264
- Attack
- Needs local access · No login needed
- Attacker can
- Read data · Change data · Take it down
- CVSS vector
AV:L/AC:L/Au:N/C:C/I:C/A:C- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
Microsoft IISServers and applications · cpe:a:microsoft:internet_information_services |
|