CVE-2006-5584 | Vulnerability Database | Aqua Security

The Remote Installation Service (RIS) in Microsoft Windows 2000 SP4 uses a TFTP server that allows anonymous access, which allows remote attackers to upload and overwrite arbitrary files to gain privileges on systems that use RIS.

Affected Software

Name	Vendor	Start Version	End Version
Windows_2000	Microsoft	*	*

References

http://secunia.com/advisories/23312
http://securitytracker.com/id?1017368
http://www.kb.cert.org/vuls/id/238064
http://www.securityfocus.com/archive/1/454969/100/200/threaded
http://www.securityfocus.com/archive/1/454969/100/200/threaded
http://www.securityfocus.com/bid/21495
http://www.us-cert.gov/cas/techalerts/TA06-346A.html
http://www.vupen.com/english/advisories/2006/4970
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-077
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A375
http://secunia.com/advisories/23312
http://securitytracker.com/id?1017368
http://www.kb.cert.org/vuls/id/238064
http://www.securityfocus.com/archive/1/454969/100/200/threaded
http://www.securityfocus.com/archive/1/454969/100/200/threaded
http://www.securityfocus.com/bid/21495
http://www.us-cert.gov/cas/techalerts/TA06-346A.html
http://www.vupen.com/english/advisories/2006/4970
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-077
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A375

NVD	https://nvd.nist.gov/vuln/detail/CVE-2006-5584
CWE	https://cwe.mitre.org/data/definitions/NVD-Other.html