CVE-2006-2380

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 17.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-06-13 · updated 2026-06-16
Weakness: CWE-287

Description

Microsoft Windows 2000 SP4 does not properly validate an RPC server during mutual authentication over SSL, which allows remote attackers to spoof an RPC server, aka the "RPC Mutual Authentication Vulnerability."

Affected products

Microsoft Windows 2000: all versions

References

http://secunia.com/advisories/20637
http://securitytracker.com/id?1016289
http://www.osvdb.org/26438
http://www.securityfocus.com/bid/18389
http://www.vupen.com/english/advisories/2006/2328
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-031
https://exchange.xforce.ibmcloud.com/vulnerabilities/26836
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1763
http://secunia.com/advisories/20637
http://securitytracker.com/id?1016289
http://www.osvdb.org/26438
http://www.securityfocus.com/bid/18389

Get alerted when CVE-2006-2380 or the next vulnerability affects your stack