Security Advisory
CVE-2006-5584
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
The Remote Installation Service (RIS) in Microsoft Windows 2000 SP4 uses a TFTP server that allows anonymous access, which allows remote attackers to upload and overwrite arbitrary files to gain privileges on systems that use RIS.