CVE-2006-4691

Stack-based buffer overflow in the NetpManageIPCConnect function in the Workstation service (wkssvc.dll) in Microsoft Windows 2000 SP4 and XP SP2 allows remote attackers to execute arbitrary code via NetrJoinDomain2 RPC messages with a long hostname.

CVSS v2.0 NVD

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

79.96% chance of exploitation in the next 30 days, 100th percentile

Published

2006-11-14

Updated

2024-08-07

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/windows/smb/ms06_070_wkssvc.rb

ExploitDB entries (4)

• https://www.exploit-db.com/exploits/16372
• https://www.exploit-db.com/exploits/2809
• https://www.exploit-db.com/exploits/2800
• https://www.exploit-db.com/exploits/2789

Security advisories

• http://secunia.com/advisories/22883
• http://www.kb.cert.org/vuls/id/778036
• http://www.securityfocus.com/bid/20985
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-070

References

• CVE Record
• NVD entry