PT-2006-3342 · Microsoft · Windows 2000 Sp4+1

Konstantin Topanov · Published 2006-06-13 · Updated 2019-04-30 · CVE-2006-2380

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Windows 2000 SP4

Description The issue is related to the way RPC handles mutual authentication over SSL, allowing remote attackers to spoof an RPC server. This could enable an attacker to persuade a user to connect to a malicious RPC server that appears to be valid.

Recommendations For Microsoft Windows 2000 SP4, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2006-2380

Affected Products

Windows 2000 Sp4

Windows

References · 14

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-031 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2380 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2006-2380 · Security Note
• http://securitytracker.com/id?1016289 · Patch
• http://secunia.com/advisories/20637 · Vendor Advisory
• http://vupen.com/english/advisories/2006/2328 · Vendor Advisory
• http://securityfocus.com/bid/18389 · Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26836 · Note
• http://xforce.iss.net/xforce/xfdb/26836 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1763 · Note
• http://frsirt.com/english/advisories/2006/2328 · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2006/ms06-031 · Note
• http://osvdb.org/26438 · Note
• http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1763 · Note