CVE-2006-2380

Published: Jun 13, 2006Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Microsoft Windows 2000 SP4 does not properly validate an RPC server during mutual authentication over SSL, which allows remote attackers to spoof an RPC server, aka the "RPC Mutual Authentication Vulnerability."

Affected (1)

Products: Microsoft: Windows 2000

Microsoft

1 product

Windows 2000

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Microsoft Windows 2000	All versions

Related CWEs

CWE-287

Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (16)

http://secunia.com/advisories/20637

Source: secure@microsoft.com

PatchVendor Advisory

http://securitytracker.com/id?1016289

Source: secure@microsoft.com

Patch

http://www.osvdb.org/26438

Source: secure@microsoft.com

http://www.securityfocus.com/bid/18389

Source: secure@microsoft.com

Patch

http://www.vupen.com/english/advisories/2006/2328

Source: secure@microsoft.com

Vendor Advisory

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-031

Source: secure@microsoft.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/26836

Source: secure@microsoft.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1763

Source: secure@microsoft.com

http://secunia.com/advisories/20637