Description
The Remote Installation Service (RIS) in Microsoft Windows 2000 SP4 uses a TFTP server that allows anonymous access, which allows remote attackers to upload and overwrite arbitrary files to gain privileges on systems that use RIS.
References
- ADV-2006-4970 vdb-entry
- VU#238064 third-party-advisory
- 1017368 vdb-entry
- TA06-346A third-party-advisory
- MS06-077 vendor-advisory
- SSRT061288 vendor-advisory
- 23312 third-party-advisory
- 21495 vdb-entry
- oval:org.mitre.oval:def:375 vdb-entry signature