CVE-2006-0023

CVE-2006-0023 describes a privilege escalation vulnerability in Microsoft Windows XP SP1 and SP2, affecting several services including SSDP and UPnP. The flaw stems from insecure default Access Control Lists (ACLs) that permit the Authenticated Users group to modify critical service configurations. With a CVSS score of 4.3, this vulnerability requires local access and authentication, allowing an attacker to achieve partial confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this decade-old vulnerability.