CVE-2006-4696

Microsoft Windows Server Service - Remote Code Execution via SMB Rename Packet

Title source: llm
STIX 2.1

Description

Unspecified vulnerability in the Server service in Microsoft Windows 2000 SP4, Server 2003 SP1 and earlier, and XP SP2 and earlier allows remote attackers to execute arbitrary code via a crafted packet, aka "SMB Rename Vulnerability."

References (8)

Core 8
Core References
Patch vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1017035
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/20373
Third Party Advisory, VDB Entry vendor-advisory x_refsource_hp
http://www.securityfocus.com/archive/1/449179/100/0/threaded
US Government Resource third-party-advisory x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/820628
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2006/3982
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/29373

Scores

EPSS 0.4324
EPSS Percentile 98.6%

Details

CWE
CWE-94
Status published
Products (4)
microsoft/windows_2000
microsoft/windows_2003_server r2
microsoft/windows_2003_server sp1
microsoft/windows_xp (3 CPE variants)
Published Oct 10, 2006
Tracked Since Feb 18, 2026