CVE-2006-4688

Microsoft Windows <SP1 - Buffer Overflow

Title source: llm

Description

Buffer overflow in Client Service for NetWare (CSNW) in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 up to SP1 allows remote attackers to execute arbitrary code via crafted messages, aka "Client Service for NetWare Memory Corruption Vulnerability."

Exploits (4)

exploitdb WORKING POC VERIFIED
by Metasploit · rubyremotewindows
https://www.exploit-db.com/exploits/16373
exploitdb WORKING POC VERIFIED
by Metasploit · rubyremotewindows
https://www.exploit-db.com/exploits/16369
metasploit WORKING POC GOOD
by pusscat · rubypocwin
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/smb/ms06_066_nwapi.rb
metasploit WORKING POC GOOD
by pusscat · rubypocwin
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/smb/ms06_066_nwwks.rb

Scores

EPSS 0.8285
EPSS Percentile 99.3%

Details

Status published
Products (3)
microsoft/windows_2000
microsoft/windows_2003_server sp1
microsoft/windows_xp
Published Nov 14, 2006
Tracked Since Feb 18, 2026