CVE-2006-2371

Published: Jun 13, 2006Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Buffer overflow in the Remote Access Connection Manager service (RASMAN) service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows remote unauthenticated or authenticated attackers to execute arbitrary code via certain crafted "RPC related requests," that lead to registry corruption and stack corruption, aka the "RASMAN Registry Corruption Vulnerability."

Affected (29)

Products: Microsoft: Windows 2000, Windows 2003 Server, Windows Xp

3 products

Windows 2003 Server

Configuration A

29 vulnerable

Vulnerable Software	Affected Versions
Microsoft Windows 2000	All versions
Microsoft Windows 2000	All versions
Microsoft Windows 2000	All versions
Microsoft Windows 2000	All versions
Microsoft Windows 2000	All versions
Microsoft Windows 2003 Server	Version datacenter_edition
Microsoft Windows 2003 Server	Version datacenter_edition sp1
Microsoft Windows 2003 Server	Version datacenter_edition_64-bit
Microsoft Windows 2003 Server	Version datacenter_edition_64-bit sp1
Microsoft Windows 2003 Server	Version enterprise_64-bit
Microsoft Windows 2003 Server	Version enterprise_edition sp1
Microsoft Windows 2003 Server	Version enterprise_edition_64-bit
Microsoft Windows 2003 Server	Version enterprise_edition_64-bit sp1
Microsoft Windows 2003 Server	Version r2
Microsoft Windows 2003 Server	Version sp1
Microsoft Windows 2003 Server	Version standard
Microsoft Windows 2003 Server	Version standard sp1
Microsoft Windows 2003 Server	Version standard_64-bit
Microsoft Windows 2003 Server	Version web
Microsoft Windows 2003 Server	Version web sp1
Microsoft Windows Xp	All versions
Microsoft Windows Xp	All versions
Microsoft Windows Xp	All versions
Microsoft Windows Xp	All versions
Microsoft Windows Xp	All versions
Microsoft Windows Xp	All versions
Microsoft Windows Xp	All versions
Microsoft Windows Xp	All versions
Microsoft Windows Xp	All versions

References (34)

http://secunia.com/advisories/20630

Source: secure@microsoft.com

PatchVendor Advisory

http://securityreason.com/securityalert/1096

Source: secure@microsoft.com

http://securitytracker.com/id?1016285

Source: secure@microsoft.com

http://www.kb.cert.org/vuls/id/814644

Source: secure@microsoft.com

US Government Resource

http://www.osvdb.org/26436

Source: secure@microsoft.com

http://www.securityfocus.com/archive/1/436977/100/0/threaded

Source: secure@microsoft.com

http://www.securityfocus.com/bid/18358

Source: secure@microsoft.com

Patch

http://www.us-cert.gov/cas/techalerts/TA06-164A.html

Source: secure@microsoft.com

US Government Resource

http://www.vupen.com/english/advisories/2006/2323

Source: secure@microsoft.com

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-025

Source: secure@microsoft.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/26814

Source: secure@microsoft.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1674

Source: secure@microsoft.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1846

Source: secure@microsoft.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1851

Source: secure@microsoft.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1857

Source: secure@microsoft.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1907

Source: secure@microsoft.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1983

Source: secure@microsoft.com

http://secunia.com/advisories/20630

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://securityreason.com/securityalert/1096

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1016285

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.kb.cert.org/vuls/id/814644

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.osvdb.org/26436

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/436977/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/18358

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.us-cert.gov/cas/techalerts/TA06-164A.html

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.vupen.com/english/advisories/2006/2323

Source: af854a3a-2127-422b-91ae-364da2661108

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-025

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/26814

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1674

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1846

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1851

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1857

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1907

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1983

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.