Gravité: : Élevé
  Identifiant(s) CVE: : CVE-2006-5584
  Date du conseil: 15 février 2016

  Description

The Remote Installation Service (RIS) in Microsoft Windows 2000 SP4 uses a TFTP server that allows anonymous access, which allows remote attackers to upload and overwrite arbitrary files to gain privileges on systems that use RIS.

  Information Exposure Rating:

  • 1000876 - Microsoft Windows Remote Installation Service Anonymous File Upload

  Solutions

  Trend Micro Deep Security DPI Rule Number: 1000876
  Trend Micro Deep Security DPI Rule Name: 1000876 - Microsoft Windows Remote Installation Service Anonymous File Upload

  Affected software and version:

  • Microsoft Windows 2000 SP4