Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2006-2370 — Out-of-bounds Write in Microsoft Windows 2003 Server

7 documents4 sources
Severity
7.5HIGHNVD
EPSS
85.5%
top 0.63%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
1
Microsoft Windows 2003 Server
Timeline
PublishedJun 13
Latest updateMay 1

Description

Buffer overflow in the Routing and Remote Access service (RRAS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows remote unauthenticated or authenticated attackers to execute arbitrary code via certain crafted "RPC related requests," aka the "RRAS Memory Corruption Vulnerability."

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages1 packages

Patches

Patch: secunia.com ↗Patch: www.osvdb.org ↗Patch: www.securityfocus.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-wc78-432p-8fh4: Buffer overflow in the Routing and Remote Access service (RRAS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows↗2022-05-01
▶
CVEList
CVE-2006-2370: Buffer overflow in the Routing and Remote Access service (RRAS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows↗2006-06-13
▶

💥Exploits & PoCs

4
Exploit-DB
Microsoft RRAS Service - RASMAN Registry Overflow (MS06-025) (Metasploit)↗2010-08-25
▶
Exploit-DB
Microsoft RRAS Service - Remote Overflow (MS06-025) (Metasploit)↗2010-05-09
▶
Exploit-DB
Microsoft Windows - RRAS RASMAN Registry Stack Overflow (MS06-025) (Metasploit)↗2006-06-29
▶
Exploit-DB
Microsoft Windows RRAS - Remote Stack Overflow (MS06-025) (Metasploit)↗2006-06-22
▶
CVE-2006-2370 — Out-of-bounds Write in Microsoft | cvebase