vulnwire
7.5high

CVE-2006-2371in critical feed

Buffer overflow in the Remote Access Connection Manager service (RASMAN) service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server…

Published 20 y ago · modified 4 mo ago · JSON

CVSS
7.5
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
22.6%
percentile 98%
Public exploits
0
none known

Buffer overflow in the Remote Access Connection Manager service (RASMAN) service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows remote unauthenticated or authenticated attackers to execute arbitrary code via certain crafted "RPC related requests," that lead to registry corruption and stack corruption, aka the "RASMAN Registry Corruption Vulnerability."

Exploit prediction (EPSS)

22.60% probability of exploitation in the next 30 days, higher than 98% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD2.07.5AV:N/AC:L/Au:N/C:P/I:P/A:P

References

  • securityreason.com /securityalert/1096 · third-party-advisory, x_refsource_SREASON, x_transferred
  • docs.microsoft.com /en-us/security-updates/securitybulletins/2006/ms06-025 · vendor-advisory, x_refsource_MS, x_transferred
  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1983 · vdb-entry, signature, x_refsource_OVAL, x_transferred
  • vupen.com /english/advisories/2006/2323 · vdb-entry, x_refsource_VUPEN, x_transferred
  • securityfocus.com /archive/1/436977/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • us-cert.gov /cas/techalerts/TA06-164A.html · third-party-advisory, x_refsource_CERT, x_transferred
  • osvdb.org /26436 · vdb-entry, x_refsource_OSVDB, x_transferred
  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1674 · vdb-entry, signature, x_refsource_OVAL, x_transferred
  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1907 · vdb-entry, signature, x_refsource_OVAL, x_transferred
  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1851 · vdb-entry, signature, x_refsource_OVAL, x_transferred
  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1857 · vdb-entry, signature, x_refsource_OVAL, x_transferred
  • securitytracker.com /id?1016285 · vdb-entry, x_refsource_SECTRACK, x_transferred
  • secunia.com /advisories/20630 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/26814 · vdb-entry, x_refsource_XF, x_transferred
  • securityfocus.com /bid/18358 · vdb-entry, x_refsource_BID, x_transferred
  • kb.cert.org /vuls/id/814644 · third-party-advisory, x_refsource_CERT-VN, x_transferred
  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1846 · vdb-entry, signature, x_refsource_OVAL, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.