CVE-2006-4691

CRITICO 10.0CVE-2006-4691 · Published 14/11/2006 · updated 16/06/2026

In breve

CVE-2006-4691 è una vulnerabilità CRITICO (CVSS 10.0).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 80.0%, superiore al 99.6% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

Stack-based buffer overflow in the NetpManageIPCConnect function in the Workstation service (wkssvc.dll) in Microsoft Windows 2000 SP4 and XP SP2 allows remote attackers to execute arbitrary code via NetrJoinDomain2 RPC messages with a long hostname.

References

research.eeye.com/html/advisories/published/AD20061114.html
secunia.com/advisories/22883 · Patch
securitytracker.com/id
kb.cert.org/vuls/id/778036 · US Government Resource
securityfocus.com/archive/1/451588/100/0/threaded
securityfocus.com/bid/20985
us-cert.gov/cas/techalerts/TA06-318A.html · US Government Resource
vupen.com/english/advisories/2006/4508
docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-070
exchange.xforce.ibmcloud.com/vulnerabilities/29948
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A607
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A908

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free