Exploitation Summary
CVE-2006-3439 has been observed exploited in the wild (reported by VulnCheck KEV).
EIP tracks 6 public exploits from researchers including Metasploit, Trirat Puttaraksa, ub3rst4r, including a Metasploit module exploits/windows/smb/ms06_040_netapi.
AI-analyzed exploit summary This is a Metasploit module exploiting a stack buffer overflow in the NetApi32 CanonicalizePathName() function via the NetpwPathCanonicalize RPC call in the Microsoft Server Service. It targets multiple Windows versions and can result in remote code execution or denial of service.
Description
Buffer overflow in the Server Service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers, including anonymous users, to execute arbitrary code via a crafted RPC message, a different vulnerability than CVE-2006-1314.
Exploits (6)
This is a Metasploit module exploiting a stack buffer overflow in the NetApi32 CanonicalizePathName() function via the NetpwPathCanonicalize RPC call in the Microsoft Server Service. It targets multiple Windows versions and can result in remote code execution or denial of service.
This is a functional exploit for CVE-2006-3439 targeting Windows Server 2003 SP0. It leverages a buffer overflow in the Server service via DCERPC to achieve remote code execution by bypassing stack protection via overwriting the security cookie.
This is a functional proof-of-concept exploit for CVE-2006-3439, targeting a vulnerability in the Microsoft Server Service. It leverages a buffer overflow in the NetprPathCanonicalize RPC call to achieve remote code execution on vulnerable Windows systems.
This exploit targets CVE-2006-3439, a buffer overflow in Microsoft Windows' CanonicalizePathName() function. It sends a series of crafted SMB packets to trigger the vulnerability and spawns a reverse shell on port 54321.
This is a Metasploit module exploiting a stack overflow in the NetApi32 NetpIsRemote() function via the NetpwPathCanonicalize RPC call in the Server Service. It targets multiple Windows versions (NT 4.0, 2000, XP SP0/SP1) and achieves remote code execution by leveraging either wcscpy() or stack overflow methods.
This Metasploit module exploits a stack buffer overflow in the NetApi32 CanonicalizePathName() function via the NetpwPathCanonicalize RPC call in the Server Service, leading to remote code execution on vulnerable Windows systems.