CVE-2006-2380

Description

Microsoft Windows 2000 SP4 does not properly validate an RPC server during mutual authentication over SSL, which allows remote attackers to spoof an RPC server, aka the "RPC Mutual Authentication Vulnerability."

References

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1763

https://exchange.xforce.ibmcloud.com/vulnerabilities/26836

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-031

http://www.vupen.com/english/advisories/2006/2328

http://www.securityfocus.com/bid/18389

http://www.osvdb.org/26438

http://securitytracker.com/id?1016289

http://secunia.com/advisories/20637

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3