NVD

Id
63323  
Name
CVE-2006-4691  
Description
Stack-based buffer overflow in the NetpManageIPCConnect function in the Workstation service (wkssvc.dll) in Microsoft Windows 2000 SP4 and XP SP2 allows remote attackers to execute arbitrary code via NetrJoinDomain2 RPC messages with a long hostname.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2016-12-20  
Published
2006-11-14  
Modified Date
2011-03-07  
Seq
2006-4691  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
329966 63323 CVE-2006-4691 oval:org.mitre.oval:def:607  View
329967 63323 CVE-2006-4691 oval:org.mitre.oval:def:908  View
329968 63323 CVE-2006-4691 AD20061114  View
329969 63323 CVE-2006-4691 1017221  View
329970 63323 CVE-2006-4691 VU#778036  View
329971 63323 CVE-2006-4691 MS06-070  View
329972 63323 CVE-2006-4691 20061114 EEYE: Workstation Service NetpManageIPCConnect Buffer Overflow  View
329973 63323 CVE-2006-4691 20985  View
329974 63323 CVE-2006-4691 TA06-318A  View
329975 63323 CVE-2006-4691 ADV-2006-4508  View
329976 63323 CVE-2006-4691 win-workstation-service-bo(29948)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58579 JVNDB-2006-000775 Microsoft Windows の Workstation サービスにおけるバッファオーバーフローの脆弱性 Microsoft Windows の Workstation サービスが使用する wkssvc.dll には、NetpManageIPCConnect 関数においてホスト名を適切にチェックしていないため、バッファオーバーフローが発生する脆弱性が存在します。 CVE-2006-4691 20793 CVE-2006-4691 63323 10 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000775.html 2006-11-14 2007-04-01 View