Intrusion PreventionMS.RRAS.RasRpcSubmitRequest.Buffer.Overflow
Description
This indicates an attack attempt against a buffer-overflow vulnerability in the Windows RRAS service.
The vulnerability is caused by a boundary checking error when handling certain DCERPC requests. This can be exploited by attackers to execute arbitrary code via certain crafted DCERPC requests.
Affected Products
Microsoft Windows 2000
Microsoft Windows XP
Microsoft Windows Server 2003
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Apply the patch, available from the vendor's website:
http://www.microsoft.com/technet/security/Bulletin/MS06-025.mspx
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 25170 |
| Created | Mar 14, 2011 |
| Updated | Nov 03, 2021 |
| Risk |
|
| CVE ID | CVE-2006-2370 |
| Exploit Prediction Score | 92.56% |
| Default Action | drop |
| Active | |
| Affected OS | Windows |
| Affected App | Other |