CVE-2006-4691

Scores

EPSS

0.889high88.9%
0%20%40%60%80%100%

Percentile: 88.9%

CVSS

10.0critical2.0
0246810

CVSS Score: 10.0/10

All CVSS Scores

CVSS 2.0
10.0

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Description

Stack-based buffer overflow in the NetpManageIPCConnect function in the Workstation service (wkssvc.dll) in Microsoft Windows 2000 SP4 and XP SP2 allows remote attackers to execute arbitrary code via NetrJoinDomain2 RPC messages with a long hostname.

Scaner-VS 7 — a modern vulnerability management solution

Uses this database for vulnerability detection. High-speed search, cross-platform, advanced configuration audit, and flexible filtering. Suitable for organizations of any size.
Learn more about Scaner-VS 7

Sources

nvd

Exploits

Exploit ID: 16372

Source: exploitdb

URL: https://www.exploit-db.com/exploits/16372

Exploit ID: 2789

Source: exploitdb

URL: https://www.exploit-db.com/exploits/2789

Exploit ID: 2800

Source: exploitdb

URL: https://www.exploit-db.com/exploits/2800

Exploit ID: 2809

Source: exploitdb

URL: https://www.exploit-db.com/exploits/2809

Vulnerable Software (2)

Type: Configuration

Vendor: *

Product: windows_2000

Operating System: * * *

Trait:
{  "cpe_match": [    {      "cpe23uri": "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:fr:*:*:*:*",      "vulnerable": true    },    {      "cpe23uri": "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_p...

Source: nvd

Type: Configuration

Vendor: *

Product: windows_xp

Operating System: * * *

Trait:
{  "cpe_match": [    {      "cpe23uri": "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:fr:*:*:*:*",      "vulnerable": true    },    {      "cpe23uri": "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_p...

Source: nvd

End of list