CVE-2006-2370

Buffer overflow in the Routing and Remote Access service (RRAS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows remote unauthenticated or authenticated attackers to execute arbitrary code via certain crafted RPC related requests, aka the RRAS Memory Corruption Vulnerability.

Affected Software

Name	Vendor	Start Version	End Version
Windows_2003_server	Microsoft	enterprise_edition_64-bit	enterprise_edition_64-bit
Windows_2003_server	Microsoft	datacenter_edition_64-bit	datacenter_edition_64-bit
Windows_2003_server	Microsoft	standard	standard
Windows_xp	Microsoft	*	*
Windows_2003_server	Microsoft	web	web
Windows_2003_server	Microsoft	datacenter_edition_64-bit	datacenter_edition_64-bit
Windows_2003_server	Microsoft	enterprise_64-bit	enterprise_64-bit
Windows_xp	Microsoft	*	*
Windows_2000	Microsoft	*	*
Windows_xp	Microsoft	*	*
Windows_2003_server	Microsoft	standard_64-bit	standard_64-bit
Windows_2000	Microsoft	*	*
Windows_2003_server	Microsoft	enterprise_edition_64-bit	enterprise_edition_64-bit
Windows_xp	Microsoft	*	*
Windows_xp	Microsoft	*	*
Windows_xp	Microsoft	*	*
Windows_2000	Microsoft	*	*
Windows_2003_server	Microsoft	r2	r2
Windows_2003_server	Microsoft	web	web
Windows_2000	Microsoft	*	*
Windows_2003_server	Microsoft	sp1	sp1
Windows_xp	Microsoft	*	*
Windows_xp	Microsoft	*	*
Windows_2003_server	Microsoft	enterprise_edition	enterprise_edition
Windows_2003_server	Microsoft	standard	standard
Windows_xp	Microsoft	*	*
Windows_2003_server	Microsoft	datacenter_edition	datacenter_edition
Windows_2003_server	Microsoft	datacenter_edition	datacenter_edition
Windows_2000	Microsoft	*	*

NVD	https://nvd.nist.gov/vuln/detail/CVE-2006-2370
CWE	https://cwe.mitre.org/data/definitions/NVD-Other.html

Affected Software

References