CVE-2006-5584: Microsoft Windows 2000

High severity, CVSS 7.5. EPSS: 31.5% chance of exploitation in the next 30 days.

The Remote Installation Service (RIS) in Microsoft Windows 2000 SP4 uses a TFTP server that allows anonymous access, which allows remote attackers to upload and overwrite arbitrary files to gain privileges on systems that use RIS.

Affected products

• Microsoft Windows 2000: any version

Published 2006-12-13. Last modified 2026-06-16.