CVE-2006-2370

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 70.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-06-13 · updated 2026-06-16

Description

Buffer overflow in the Routing and Remote Access service (RRAS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows remote unauthenticated or authenticated attackers to execute arbitrary code via certain crafted "RPC related requests," aka the "RRAS Memory Corruption Vulnerability."

Affected products

Microsoft Windows 2000: all versions
Microsoft Windows 2003 Server: datacenter_edition, datacenter_edition-sp1, datacenter_edition_64-bit, datacenter_edition_64-bit-sp1, enterprise_64-bit, enterprise_edition-sp1 (+9)
Microsoft Windows XP Service Pack 3: all versions

References

http://secunia.com/advisories/20630
http://securitytracker.com/id?1016285
http://www.kb.cert.org/vuls/id/631516
http://www.osvdb.org/26437
http://www.securityfocus.com/bid/18325
http://www.us-cert.gov/cas/techalerts/TA06-164A.html
http://www.vupen.com/english/advisories/2006/2323
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-025
https://exchange.xforce.ibmcloud.com/vulnerabilities/26812
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1587
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1720
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1741

Get alerted when CVE-2006-2370 or the next vulnerability affects your stack