CVE-2006-2371 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft Windows 2003 Server

3 documents3 sources
Severity
7.5HIGHNVD
EPSS
38.6%
top 2.75%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Microsoft Windows 2003 Server
Timeline
PublishedJun 13
Latest updateMay 1

Description

Buffer overflow in the Remote Access Connection Manager service (RASMAN) service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows remote unauthenticated or authenticated attackers to execute arbitrary code via certain crafted "RPC related requests," that lead to registry corruption and stack corruption, aka the "RASMAN Registry Corruption Vulnerability."

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages1 packages

Patches

Patch: secunia.com ↗Patch: www.securityfocus.com ↗Patch: secunia.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-gpg5-4482-gv27: Buffer overflow in the Remote Access Connection Manager service (RASMAN) service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 an↗2022-05-01
▶
CVEList
CVE-2006-2371: Buffer overflow in the Remote Access Connection Manager service (RASMAN) service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 an↗2006-06-13
▶
CVE-2006-2371 — Microsoft vulnerability | cvebase