| Vulnerability Name: | CVE-2006-4688 (CCN-29952) | ||||||||
| Assigned: | 2006-11-14 | ||||||||
| Published: | 2006-11-14 | ||||||||
| Updated: | 2018-10-17 | ||||||||
| Summary: | Buffer overflow in Client Service for NetWare (CSNW) in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 up to SP1 allows remote attackers to execute arbitrary code via crafted messages, aka "Client Service for NetWare Memory Corruption Vulnerability." | ||||||||
| CVSS v3 Severity: | 9.0 Critical (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H)
| ||||||||
| CVSS v2 Severity: | 7.5 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P) 5.5 Medium (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)
5.6 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)
| ||||||||
| Vulnerability Type: | CWE-Other | ||||||||
| Vulnerability Consequences: | Gain Access | ||||||||
| References: | Source: MITRE Type: CNA CVE-2006-4688 Source: CCN Type: SA22866 Microsoft Windows Client Service for Netware Vulnerabilities Source: SECUNIA Type: Patch 22866 Source: CCN Type: SECTRACK ID: 1017224 Microsoft Client Service for Netware Buffer Overflows Let Remote Users Execute Arbitrary Code and Crash the System Source: SECTRACK Type: UNKNOWN 1017224 Source: CCN Type: ASA-2006-253 Microsoft Security Bulletin Summary for November 2006 (MS06-66 - MS06-71) Source: CCN Type: Microsoft Security Bulletin MS06-066 Vulnerabilities in NetWare Client Service Could Allow Remote Code Execution (923980) Source: BUGTRAQ Type: UNKNOWN 20061116 Vulnerabilities in Client Service for NetWare Source: BID Type: UNKNOWN 21023 Source: CCN Type: BID-21023 Microsoft Windows Client Service For Netware Remote Code Execution Vulnerability Source: CERT Type: US Government Resource TA06-318A Source: VUPEN Type: UNKNOWN ADV-2006-4504 Source: MS Type: UNKNOWN MS06-066 Source: XF Type: UNKNOWN ms-csnw-bo(29952) Source: XF Type: UNKNOWN ms-csnw-bo(29952) Source: OVAL Type: UNKNOWN oval:org.mitre.oval:def:404 Source: CCN Type: Rapid7 Vulnerability and Exploit Database [11-14-2006] MS06-066 Microsoft Services nwapi32.dll Module Exploit Source: CCN Type: Rapid7 Vulnerability and Exploit Database [11-14-2006] MS06-066 Microsoft Services nwwks.dll Module Exploit | ||||||||
| Vulnerable Configuration: | Configuration 1: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||
| Oval Definitions | |||||||||
| |||||||||
| BACK | |||||||||