Exploitation Summary
EIP tracks 5 public exploits for CVE-2006-4691.
PoCs published by Metasploit, Winny Thomas, S A Stevens, including Metasploit module exploits/windows/smb/ms06_070_wkssvc.
AI-analyzed exploit summary This is a Metasploit module exploiting a stack buffer overflow in the NetApi32 NetpManageIPCConnect function via the Workstation service in Windows 2000 SP4 and Windows XP SP0/SP1. It requires a valid domain name and leverages DCERPC to trigger the vulnerability.
Description
Stack-based buffer overflow in the NetpManageIPCConnect function in the Workstation service (wkssvc.dll) in Microsoft Windows 2000 SP4 and XP SP2 allows remote attackers to execute arbitrary code via NetrJoinDomain2 RPC messages with a long hostname.
Exploits (5)
This is a Metasploit module exploiting a stack buffer overflow in the NetApi32 NetpManageIPCConnect function via the Workstation service in Windows 2000 SP4 and Windows XP SP0/SP1. It requires a valid domain name and leverages DCERPC to trigger the vulnerability.
This exploit targets CVE-2006-4691, a vulnerability in the Windows WorkStation NetpManageIPCConnect function. It crafts a malicious NetrJoinDomain2 request to trigger a buffer overflow, executing shellcode for remote code execution (RCE).
This exploit targets a stack overflow vulnerability in Microsoft Windows Wkssvc NetrJoinDomain2 (MS06-070) on Windows 2000 Server SP4. It uses a crafted RPC request to trigger the overflow and execute shellcode for a bind shell on port 4443.
This exploit targets CVE-2006-4691, a stack overflow vulnerability in Microsoft Windows Wkssvc NetrJoinDomain2 (MS06-070). It crafts a malicious SMB packet to trigger a buffer overflow, leading to remote code execution via embedded shellcode.
This Metasploit module exploits a stack buffer overflow in the NetApi32 NetpManageIPCConnect function via the Workstation service in Windows 2000 SP4 and Windows XP SP0/SP1. It leverages DCERPC to trigger the vulnerability, requiring a valid domain name for successful exploitation.