Detections
Analytics
MS06-025: Vulnerability in Routing and Remote Access Could Allow Remote Code Execution (911280) (uncredentialed check)
high Nessus Plugin ID 21696
Synopsis
It is possible to execute code on the remote host.Description
The remote version of Windows contains a version of RRAS (Routing and Remote Access Service) that is affected by several memory corruption vulnerabilities.An attacker may exploit these flaws to execute code on the remote service.
Solution
Microsoft has released a set of patches for Windows 2000, XP and 2003.See Also
https://docs.microsoft.com/en-us/security-updates/SecurityBulletins/2006/ms06-025
Plugin Details
Severity: High
ID: 21696
File Name: smb_kb911280.nasl
Version: 1.34
Type: local
Agent: windows
Family: Windows
Published: 6/13/2006
Updated: 11/15/2018
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: High
Score: 7.0
CVSS v2
Risk Factor: High
Base Score: 7.5
Temporal Score: 6.2
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
Vulnerability Information
CPE: x-cpe:/a:microsoft:windows:routingsvr, cpe:/o:microsoft:windows
Required KB Items: Host/OS/smb
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 7/13/2006
Vulnerability Publication Date: 6/13/2006
Exploitable With
CANVAS (CANVAS)
Core Impact
Metasploit (MS06-025 Microsoft RRAS Service Overflow)
Reference Information
CVE: CVE-2006-2370, CVE-2006-2371
MSFT: MS06-025
MSKB: 911280