Vulnerability in Microsoft Windows_2000
CVE-2006-4691
Stack-based buffer overflow in the NetpManageIPCConnect function in the Workstation service (wkssvc.dll) in Microsoft Windows 2000 SP4 and XP SP2 allows remote attackers to execute arbitrary code via NetrJoinDomain2 RPC messages with a lon…
EPSS: 0.802 (99.6th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Windows_2000
- Microsoft Windows_xp
- N/a — versions n/a
Public proof-of-concept exploits
References
- secure@microsoft.com (US Government Resource, x_refsource_CERT, third-party-advisory)
- secure@microsoft.com (x_refsource_OVAL, signature, vdb-entry)
- secure@microsoft.com (vdb-entry, x_refsource_BID)
- secure@microsoft.com (vdb-entry, x_refsource_XF)
- secure@microsoft.com (Patch, x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- secure@microsoft.com (US Government Resource, x_refsource_CERT-VN, third-party-advisory)
- secure@microsoft.com (vdb-entry, x_refsource_SECTRACK)
- secure@microsoft.com (mailing-list, x_refsource_BUGTRAQ)
- secure@microsoft.com (x_refsource_EEYE, third-party-advisory)
- secure@microsoft.com (x_refsource_MS, vendor-advisory)
Frequently asked questions
- What is CVE-2006-4691?
- CVE-2006-4691 is a vulnerability in Microsoft Windows_2000. Published 2006-11-14.
- Is CVE-2006-4691 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.