CVE:CVE-2006-2371
CNNVD:CNNVD-200606-276
Microsoft Windows是美国微软（Microsoft）公司发布的一系列操作系统。
Microsoft Windows远程访问连接管理器(RASMAN)存在可远程调用的RPC接口，其中RPC接口
_RasRpcSubmitRequest存在若干安全漏洞，远程攻击者可能利用此漏洞在服务器上执行任意指令。
函数_RasRpcSubmitRequest及其子函数对作为参数的函数指针的有效性检查不足；某些子函数对参数的处理存在缓冲区溢出漏洞；这些漏洞都可能被攻击者利用在服务器上执行任意指令，从而控制系统。
solution:Upgrade microsoft windows_2000 to a higher version than *,*:sp1,*:sp2,*:sp3,*:sp4,and avoid the version *:sp1,*:sp2,*:sp3,*:sp4; Upgrade microsoft windows_2003_server to a higher version than datacenter_edition,datacenter_edition:sp1,datacenter_edition_64-bit,datacenter_edition_64-bit:sp1,enterprise_64-bit,enterprise_edition:sp1,enterprise_edition_64-bit,enterprise_edition_64-bit:sp1,r2,sp1,standard,standard:sp1,standard_64-bit,web,web:sp1,and avoid the version datacenter_edition,datacenter_edition:sp1,datacenter_edition_64-bit,datacenter_edition_64-bit:sp1,enterprise_64-bit,enterprise_edition:sp1,enterprise_edition_64-bit,enterprise_edition_64-bit:sp1,r2,sp1,standard,standard:sp1,standard_64-bit,web,web:sp1; Upgrade microsoft windows_xp to a higher version than *,*:gold,*:sp1,*:sp2,and avoid the version *:gold,*:sp1,*:sp2