CVE-2006-2370
Windows 2000 and 2003 Server - Remote Code Execution via RRAS RPC Request
Title source: llmExploitation Summary
EIP tracks 6 public exploits for CVE-2006-2370.
PoCs published by Metasploit, Pusscat, H D Moore, including Metasploit module exploits/windows/smb/ms06_025_rras.
AI-analyzed exploit summary This Metasploit module exploits a stack buffer overflow in the Windows Routing and Remote Access Service (RRAS) via a malicious registry key. It uses an egghunter and DCERPC to achieve remote code execution on Windows 2000 SP4.
Description
Buffer overflow in the Routing and Remote Access service (RRAS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows remote unauthenticated or authenticated attackers to execute arbitrary code via certain crafted "RPC related requests," aka the "RRAS Memory Corruption Vulnerability."
Exploits (6)
This Metasploit module exploits a stack buffer overflow in the Windows Routing and Remote Access Service (RRAS) via a malicious registry key. It uses an egghunter and DCERPC to achieve remote code execution on Windows 2000 SP4.
This Metasploit module exploits a stack buffer overflow in the Windows Routing and Remote Access Service (RRAS) via a malformed DCERPC request. It targets Windows 2000 SP4 and Windows XP SP1, requiring authentication for Windows 2000.
This is a Metasploit module exploiting a stack overflow in the Windows Routing and Remote Access Service (RRAS) via a maliciously crafted registry key. It uses DCERPC and SMB to trigger the vulnerability, achieving remote code execution on Windows 2000 and XP systems.
This is a Metasploit exploit module for CVE-2006-2370, targeting a stack overflow in the Windows Routing and Remote Access Service (RRAS). It leverages DCERPC to deliver a payload, with specific targets for Windows 2000 and XP SP1.
This Metasploit module exploits a stack buffer overflow in the Windows Routing and Remote Access Service (RRAS) via a malformed DCERPC request. It targets Windows 2000 SP4 and XP SP1, requiring authentication for Windows 2000.
This Metasploit module exploits a stack buffer overflow in the Windows Routing and Remote Access Service (RRAS) via a malicious registry key. It uses an egghunter to locate and execute the payload, targeting Windows 2000 SP4.