vendor:
Routing and Remote Access Service
by:
Nicolas Pouvesle, H D Moore
7.5
CVSS
HIGH
Stack Overflow
Unknown
CWE
Product Name: Routing and Remote Access Service
Affected Version From: Unknown
Affected Version To: Unknown
Patch Exists: NO
Related CWE: Unknown
CPE: Unknown
Platforms Tested: Windows
Unknown
Microsoft RRAS MSO6-025 Stack Overflow
This module exploits a stack overflow in the Windows Routing and Remote Access Service. Since the service is hosted inside svchost.exe, a failed exploit attempt can cause other system services to fail as well. A valid username and password is required to exploit this flaw on Windows 2000. When attacking XP SP1, the SMBPIPE op.
Mitigation:
Unknown