CVE-2006-2370
Microsoft Windows 2000 - Buffer Overflow
Title source: ruleDescription
Buffer overflow in the Routing and Remote Access service (RRAS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows remote unauthenticated or authenticated attackers to execute arbitrary code via certain crafted "RPC related requests," aka the "RRAS Memory Corruption Vulnerability."
Exploits (6)
exploitdb
WORKING POC
VERIFIED
by Metasploit · rubyremotewindows
https://www.exploit-db.com/exploits/16375
exploitdb
WORKING POC
VERIFIED
by Metasploit · rubyremotewindows
https://www.exploit-db.com/exploits/16364
exploitdb
WORKING POC
VERIFIED
by H D Moore · remotewindows
https://www.exploit-db.com/exploits/1940
metasploit
WORKING POC
NORMAL
rubypocwin
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/smb/ms06_025_rras.rb
metasploit
WORKING POC
GOOD
by pusscat, hdm · rubypocwin
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/smb/ms06_025_rasmans_reg.rb
References (15)
Scores
EPSS
0.8547
EPSS Percentile
99.4%
Details
Status
published
Products (12)
microsoft/windows_2000
(5 CPE variants)
microsoft/windows_2003_server
datacenter_edition (2 CPE variants)
microsoft/windows_2003_server
datacenter_edition_64-bit (2 CPE variants)
microsoft/windows_2003_server
enterprise_64-bit
microsoft/windows_2003_server
enterprise_edition sp1
microsoft/windows_2003_server
enterprise_edition_64-bit (2 CPE variants)
microsoft/windows_2003_server
r2
microsoft/windows_2003_server
sp1
microsoft/windows_2003_server
standard (2 CPE variants)
microsoft/windows_2003_server
standard_64-bit
... and 2 more
Published
Jun 13, 2006
Tracked Since
Feb 18, 2026