Exploitation Summary
EIP tracks 4 public exploits for CVE-2006-4688.
PoCs published by Metasploit, pusscat, including Metasploit module exploits/windows/smb/ms06_066_nwapi.
AI-analyzed exploit summary This Metasploit module exploits a stack buffer overflow in the nwapi32.dll module of the NetWare client service on Windows XP SP2. It uses an egghunter technique to locate and execute the payload, achieving remote code execution via a maliciously crafted DCERPC request.
Description
Buffer overflow in Client Service for NetWare (CSNW) in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 up to SP1 allows remote attackers to execute arbitrary code via crafted messages, aka "Client Service for NetWare Memory Corruption Vulnerability."
Exploits (4)
This Metasploit module exploits a stack buffer overflow in the nwapi32.dll module of the NetWare client service on Windows XP SP2. It uses an egghunter technique to locate and execute the payload, achieving remote code execution via a maliciously crafted DCERPC request.
This exploit targets a stack buffer overflow in the nwapi32.dll module via the NetWare client service in svchost. It leverages a malformed DCERPC request to achieve remote code execution on vulnerable Windows XP SP2 systems.
This Metasploit module exploits a stack buffer overflow in the nwapi32.dll module via the svchost service when the NetWare client service is running. It uses an egghunter to locate and execute the payload, targeting Windows XP SP2.
This Metasploit module exploits a stack buffer overflow in the nwapi32.dll module via the svchost service when the NetWare client service is running. It leverages a DCERPC call to trigger the vulnerability and execute arbitrary payloads.