CVE-2006-2372

Microsoft DHCP Client Service - Remote Code Execution via Crafted DHCP Response

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2006-2372. PoCs published by redsand.

AI-analyzed exploit summary This exploit targets a vulnerability in the Microsoft Windows DHCP client (MS06-036) by sending a maliciously crafted broadcast packet. It leverages a buffer overflow to achieve remote code execution on vulnerable systems.

Description

Buffer overflow in the DHCP Client service for Microsoft Windows 2000 SP4, Windows XP SP1 and SP2, and Server 2003 up to SP1 allows remote attackers to execute arbitrary code via a crafted DHCP response.

Exploits (1)

exploitdb WORKING POC VERIFIED
by redsand · textremotewindows
https://www.exploit-db.com/exploits/2054

This exploit targets a vulnerability in the Microsoft Windows DHCP client (MS06-036) by sending a maliciously crafted broadcast packet. It leverages a buffer overflow to achieve remote code execution on vulnerable systems.

Classification
Working Poc 90%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: Microsoft Windows DHCP Client (pre-MS06-036 patch)
No auth needed
Prerequisites: Network access to the target · Vulnerable DHCP client configuration
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (15)

Core 15
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1016468
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/439675/100/0/threaded
Patch, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/21010
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/1201
Third Party Advisory mailing-list x_refsource_fulldisc
http://archives.neohapsis.com/archives/fulldisclosure/2006-07/0222.html
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2006/2754
Patch vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/18923
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A232
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/444631/100/0/threaded
Exploit, Third Party Advisory exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/2054
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/27151
US Government Resource third-party-advisory x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/257164
US Government Resource third-party-advisory x_refsource_cert
http://www.us-cert.gov/cas/techalerts/TA06-192A.html

Scores

EPSS 0.9023
EPSS Percentile 99.8%

Details

CWE
CWE-119
Status published
Products (1)
microsoft/dhcp_client_service
Published Jul 11, 2006
Tracked Since Feb 18, 2026