CVE-2006-4688
Microsoft Windows <SP1 - Buffer Overflow
Title source: llmDescription
Buffer overflow in Client Service for NetWare (CSNW) in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 up to SP1 allows remote attackers to execute arbitrary code via crafted messages, aka "Client Service for NetWare Memory Corruption Vulnerability."
Exploits (4)
exploitdb
WORKING POC
VERIFIED
by Metasploit · rubyremotewindows
https://www.exploit-db.com/exploits/16373
exploitdb
WORKING POC
VERIFIED
by Metasploit · rubyremotewindows
https://www.exploit-db.com/exploits/16369
metasploit
WORKING POC
GOOD
by pusscat · rubypocwin
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/smb/ms06_066_nwapi.rb
metasploit
WORKING POC
GOOD
by pusscat · rubypocwin
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/smb/ms06_066_nwwks.rb
References (9)
Scores
EPSS
0.8285
EPSS Percentile
99.3%
Details
Status
published
Products (3)
microsoft/windows_2000
microsoft/windows_2003_server
sp1
microsoft/windows_xp
Published
Nov 14, 2006
Tracked Since
Feb 18, 2026