PT-2006-5473 · Microsoft · Windows Server 2003+3

Peter Winter-Smith + 1 · Published 2006-11-14 · Updated 2018-10-17 · CVE-2006-4688

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Windows 2000 SP4 Microsoft Windows XP SP2 Microsoft Windows Server 2003 up to SP1

Description A buffer overflow issue exists in the Client Service for NetWare (CSNW) component, allowing remote attackers to execute arbitrary code through crafted messages. This issue is also known as the "Client Service for NetWare Memory Corruption" problem.

Recommendations For Microsoft Windows 2000 SP4, apply the necessary patch to fix the buffer overflow issue in CSNW. For Microsoft Windows XP SP2, apply the necessary patch to fix the buffer overflow issue in CSNW. For Microsoft Windows Server 2003 up to SP1, apply the necessary patch to fix the buffer overflow issue in CSNW.

Exploit

Fix

Related Identifiers

CVE-2006-4688

Affected Products

Client Service For Netware

Windows 2000

Windows Server 2003

Windows Xp

References · 14

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/smb/ms06_066_nwapi.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/smb/ms06_066_nwwks.rb · Exploit
• 🔥 https://exploit-db.com/exploits/16373 · Exploit
• 🔥 https://exploit-db.com/exploits/16369 · Exploit
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-066 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-4688 · Security Note
• http://secunia.com/advisories/22866 · Patch
• http://vupen.com/english/advisories/2006/4504 · Note
• http://securityfocus.com/archive/1/451844/100/0/threaded · Note
• http://securityfocus.com/bid/21023 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29952 · Note
• http://securitytracker.com/id?1017224 · Note
• http://us-cert.gov/cas/techalerts/TA06-318A.html · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A404 · Note