CVE-2006-2370
60Vexday Risk Score
Corrige pronto. Ella tiene exploit funcional público.
ssvc Attendepss 70%
de la publicación al arma9 días
Publicada en NVD13 jun
1ª PoC+9d
metasploit13 jun
probabilidad de explotación
70%top 1% de las CVE
explotación observada
noninguna fuente lo reporta
4 exploit(s) público(s)
Buffer overflow in the Routing and Remote Access service (RRAS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows remote unauthenticated or authenticated attackers to execute arbitrary code via certain crafted "RPC related requests," aka the "RRAS Memory Corruption Vulnerability."
Productos afectados
n/a · n/aPoCs públicas encontradas — 4
exploitdbwww.exploit-db.com/exploits/16375no verificadoexploitdbwww.exploit-db.com/exploits/16364no verificadoexploitdbwww.exploit-db.com/exploits/1965no verificadoexploitdbwww.exploit-db.com/exploits/1940no verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
Referencias
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-025http://secunia.com/advisories/20630http://securitytracker.com/id?1016285https://exchange.xforce.ibmcloud.com/vulnerabilities/26812https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1587https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1720https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1741https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1823https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1936https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2061http://www.kb.cert.org/vuls/id/631516http://www.osvdb.org/26437