Secunia

Two vulnerabilities have been reported in Microsoft Windows, which can be exploited by malicious people or users to compromise a vulnerable system.

1) A boundary error exists within the Routing and Remote Access service (RRAS) service when handling certain RPC requests. This can be exploited to cause memory corruption and allows arbitrary code execution.

2) A boundary error exists within the Routing and Remote Access service (RRAS) service when handling certain RPC requests. This can be exploited to cause corruption of the RASMAN registry and allows arbitrary code execution.

Successful exploitation on Windows XP SP2 and Windows Server 2003 requires valid logon credentials. On Windows 2000 SP4 and Windows XP SP1, the vulnerabilities can be exploited by anonymous users.

Solution
Apply patches.
Further details available in Customer Area

Provided and/or discovered by
1) Reported by the vendor.
2) Peter Winter-Smith of NGSSoftware.

Changelog
Further details available in Customer Area

Original Advisory
MS06-025 (KB911280):
http://www.microsoft.com/technet/security/Bulletin/MS06-025.mspx

NGSSoftware:
http://www.ngssoftware.com/advisories/rasman.txt

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area