CVE-2006-2370

Microsoft Windows 2000 - Buffer Overflow

Title source: rule

Description

Buffer overflow in the Routing and Remote Access service (RRAS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows remote unauthenticated or authenticated attackers to execute arbitrary code via certain crafted "RPC related requests," aka the "RRAS Memory Corruption Vulnerability."

Exploits (6)

exploitdb WORKING POC VERIFIED
by Metasploit · rubyremotewindows
https://www.exploit-db.com/exploits/16375
exploitdb WORKING POC VERIFIED
by Metasploit · rubyremotewindows
https://www.exploit-db.com/exploits/16364
exploitdb WORKING POC VERIFIED
by Pusscat · remotewindows
https://www.exploit-db.com/exploits/1965
exploitdb WORKING POC VERIFIED
by H D Moore · remotewindows
https://www.exploit-db.com/exploits/1940
metasploit WORKING POC NORMAL
rubypocwin
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/smb/ms06_025_rras.rb
metasploit WORKING POC GOOD
by pusscat, hdm · rubypocwin
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/smb/ms06_025_rasmans_reg.rb

Scores

EPSS 0.8547
EPSS Percentile 99.4%

Details

Status published
Products (12)
microsoft/windows_2000 (5 CPE variants)
microsoft/windows_2003_server datacenter_edition (2 CPE variants)
microsoft/windows_2003_server datacenter_edition_64-bit (2 CPE variants)
microsoft/windows_2003_server enterprise_64-bit
microsoft/windows_2003_server enterprise_edition sp1
microsoft/windows_2003_server enterprise_edition_64-bit (2 CPE variants)
microsoft/windows_2003_server r2
microsoft/windows_2003_server sp1
microsoft/windows_2003_server standard (2 CPE variants)
microsoft/windows_2003_server standard_64-bit
... and 2 more
Published Jun 13, 2006
Tracked Since Feb 18, 2026