Auth bypass in Microsoft Windows 2000
CVE-2006-2380
Microsoft Windows 2000 SP4 does not properly validate an RPC server during mutual authentication over SSL, which allows remote attackers to spoof an RPC server, aka the "RPC Mutual Authentication Vulnerability."
Vulnerability class: Broken Authentication
EPSS: 0.178 (96.9th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Windows_2000
- N/a — versions n/a
Weakness classification (CWE)
References
- secure@microsoft.com (Patch, vdb-entry, x_refsource_SECTRACK)
- secure@microsoft.com (x_refsource_OVAL, signature, vdb-entry)
- secure@microsoft.com (Patch, vdb-entry, x_refsource_BID)
- secure@microsoft.com (vdb-entry, x_refsource_VUPEN, Vendor Advisory)
- secure@microsoft.com (x_refsource_OSVDB, vdb-entry)
- secure@microsoft.com (Patch, x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- secure@microsoft.com (x_refsource_MS, vendor-advisory)
- secure@microsoft.com (vdb-entry, x_refsource_XF)