CVE-2006-2380

The record

Microsoft Windows 2000 SP4 does not properly validate an RPC server during mutual authentication over SSL, which allows remote attackers to spoof an RPC server, aka the "RPC Mutual Authentication Vulnerability."

Affected packages

Related vulnerabilities

• CVE-2026-56850 A flaw in Node.js HTTPS Agent connection reuse can cause PFX object-array key collisions… CWE-287
• CVE-2026-50365 Improper authentication in Windows RPC API allows an unauthorized attacker to elevate… CWE-287
• CVE-2026-55689 OpenFGA is an authorization/permission engine built for developers. CWE-287
• CVE-2026-49869 Kestra is an open-source, event-driven orchestration platform. CWE-287
• CVE-2026-55962 TLS 1.3 post-handshake authentication (PHA) issue where a server could accept a client's… CWE-287
• CVE-2026-11703 Missing SNI/ALPN binding on stateful (session-ID) resumption, which previously skipped… CWE-287
• CVE-2026-54089 File Browser is a file managing interface for uploading, deleting, previewing, renaming… CWE-287
• CVE-2026-55759 Rocket.Chat is an open-source, secure, fully customizable communications platform. CWE-287