PT-2006-5473 · Microsoft · Windows Server 2003+3

Peter Winter-Smith + 1 · Publicado 2006-11-14 · Atualizado 2018-10-17 · CVE-2006-4688

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Windows 2000 SP4 Microsoft Windows XP SP2 Microsoft Windows Server 2003 up to SP1

Description A buffer overflow issue exists in the Client Service for NetWare (CSNW) component, allowing remote attackers to execute arbitrary code through crafted messages. This issue is also known as the "Client Service for NetWare Memory Corruption" problem.

Recommendations For Microsoft Windows 2000 SP4, apply the necessary patch to fix the buffer overflow issue in CSNW. For Microsoft Windows XP SP2, apply the necessary patch to fix the buffer overflow issue in CSNW. For Microsoft Windows Server 2003 up to SP1, apply the necessary patch to fix the buffer overflow issue in CSNW.

Exploit

Correção

Identificadores relacionados

CVE-2006-4688

Produtos afetados

Client Service For Netware

Windows 2000

Windows Server 2003

Windows Xp

Referências · 14

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/smb/ms06_066_nwapi.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/smb/ms06_066_nwwks.rb · Exploit
• 🔥 https://exploit-db.com/exploits/16373 · Exploit
• 🔥 https://exploit-db.com/exploits/16369 · Exploit
• http://vupen.com/english/advisories/2006/4504 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-066 · Aviso do Fabricante
• http://securityfocus.com/archive/1/451844/100/0/threaded · Nota
• http://securityfocus.com/bid/21023 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29952 · Nota
• http://securitytracker.com/id?1017224 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-4688 · Nota de Segurança
• http://secunia.com/advisories/22866 · Correção
• http://us-cert.gov/cas/techalerts/TA06-318A.html · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A404 · Nota