CVEvulnerability
CVE-2006-4691
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2006-11-14
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Description
Stack-based buffer overflow in the NetpManageIPCConnect function in the Workstation service (wkssvc.dll) in Microsoft Windows 2000 SP4 and XP SP2 allows remote attackers to execute arbitrary code via NetrJoinDomain2 RPC messages with a long hostname.
Affected configurations
• microsoft windows 2000
• microsoft windows xp
References
- http://research.eeye.com/html/advisories/published/AD20061114.html research.eeye.com
- http://secunia.com/advisories/22883 Patch, Vendor Advisory
- http://securitytracker.com/id?1017221 securitytracker.com
- http://www.kb.cert.org/vuls/id/778036 US Government Resource
- http://www.securityfocus.com/archive/1/451588/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/20985 www.securityfocus.com
- http://www.us-cert.gov/cas/techalerts/TA06-318A.html US Government Resource
- http://www.vupen.com/english/advisories/2006/4508 www.vupen.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-070 docs.microsoft.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29948 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A607 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A908 oval.cisecurity.org
- http://research.eeye.com/html/advisories/published/AD20061114.html research.eeye.com
- http://secunia.com/advisories/22883 Patch, Vendor Advisory
- http://securitytracker.com/id?1017221 securitytracker.com
- http://www.kb.cert.org/vuls/id/778036 US Government Resource
- http://www.securityfocus.com/archive/1/451588/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/20985 www.securityfocus.com
- http://www.us-cert.gov/cas/techalerts/TA06-318A.html US Government Resource
- http://www.vupen.com/english/advisories/2006/4508 www.vupen.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-070 docs.microsoft.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29948 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A607 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A908 oval.cisecurity.org