CVE-2006-4691
60Vexday Risk Score
Corrija em breve. Ela tem exploit funcional público.
ssvc Attendepss 79%
da publicação à arma2 dias
Publicada no NVD14 de nov.
1ª PoC+2d
metasploit14 de nov.
probabilidade de exploração
79%top 1% das CVEs
exploração observada
nãonenhuma fonte reporta
4 exploit(s) público(s)
Stack-based buffer overflow in the NetpManageIPCConnect function in the Workstation service (wkssvc.dll) in Microsoft Windows 2000 SP4 and XP SP2 allows remote attackers to execute arbitrary code via NetrJoinDomain2 RPC messages with a long hostname.
Produtos afetados
n/a · n/aPoCs públicas encontradas — 4
exploitdbwww.exploit-db.com/exploits/2809não verificadoexploitdbwww.exploit-db.com/exploits/2789não verificadoexploitdbwww.exploit-db.com/exploits/2800não verificadoexploitdbwww.exploit-db.com/exploits/16372não verificado⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
Referências
http://research.eeye.com/html/advisories/published/AD20061114.htmlhttps://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-070http://secunia.com/advisories/22883http://securitytracker.com/id?1017221https://exchange.xforce.ibmcloud.com/vulnerabilities/29948https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A607https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A908http://www.kb.cert.org/vuls/id/778036http://www.securityfocus.com/archive/1/451588/100/0/threadedhttp://www.securityfocus.com/bid/20985http://www.us-cert.gov/cas/techalerts/TA06-318A.htmlhttp://www.vupen.com/english/advisories/2006/4508