CVEvulnerability
CVE-2006-2380
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-06-13
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-287
Description
Microsoft Windows 2000 SP4 does not properly validate an RPC server during mutual authentication over SSL, which allows remote attackers to spoof an RPC server, aka the "RPC Mutual Authentication Vulnerability."
Affected configurations
• microsoft windows 2000
Related
Weakness · CWE (1)
- CWE-287 Improper Authentication weakness
References
- http://secunia.com/advisories/20637 Patch, Vendor Advisory
- http://securitytracker.com/id?1016289 Patch
- http://www.osvdb.org/26438 www.osvdb.org
- http://www.securityfocus.com/bid/18389 Patch
- http://www.vupen.com/english/advisories/2006/2328 Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-031 docs.microsoft.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26836 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1763 oval.cisecurity.org
- http://secunia.com/advisories/20637 Patch, Vendor Advisory
- http://securitytracker.com/id?1016289 Patch
- http://www.osvdb.org/26438 www.osvdb.org
- http://www.securityfocus.com/bid/18389 Patch
- http://www.vupen.com/english/advisories/2006/2328 Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-031 docs.microsoft.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26836 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1763 oval.cisecurity.org