CVE-2006-2380
medium · 4.3Microsoft Windows 2000 SP4 does not properly validate an RPC server during mutual authentication over SSL, which allows remote attackers to spoof an RPC server, aka the "RPC Mutual Authentication Vulnerability."
4.3
CVSS
17.8%
EPSS (exploit prob.)
97th
EPSS percentile
2006-06-13
Published
AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
CWE-287
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| microsoft | windows_2000 | all versions |
Check a specific version with /api/v1/cve/match.
References
- http://secunia.com/advisories/20637
- http://securitytracker.com/id?1016289
- http://www.osvdb.org/26438
- http://www.securityfocus.com/bid/18389
- http://www.vupen.com/english/advisories/2006/2328
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-031
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26836
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1763
- http://secunia.com/advisories/20637
- http://securitytracker.com/id?1016289
- http://www.osvdb.org/26438
- http://www.securityfocus.com/bid/18389
- http://www.vupen.com/english/advisories/2006/2328
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-031
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26836
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1763
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2006-2380