30260 : Microsoft Windows Client Service for NetWare (CSNW) Crafted Message Remote Code Execution
Printer | http://osvdb.org/30260 | Email This | Edit Vulnerability

Views This Week	Views All Time	Added to OSVDB	Last Modified	Modified (since 2008)	Percent Complete
9	1310	over 6 years ago	25 days ago	9 times	100%

Timeline

Disclosure Date
2006-11-14

Description

A buffer overflow exists in Windows. The Client Service for Netware fails to validate unspecified data resulting in a buffer overflow. With a specially crafted request, a remote attacker can cause arbitrary code execution as Local System resulting in a loss of integrity.

Classification

Location: Remote / Network Access
Attack Type: Input Manipulation
Impact: Loss of Integrity
Solution: Patch / RCS
Exploit: Exploit Public, Exploit Commercial
Disclosure: Vendor Verified, Coordinated Disclosure

Solution

Currently, there are no known workarounds or upgrades to correct this issue. However, Microsoft has released a patch to address this vulnerability.

Products

Microsoft Corporation	Windows XP	SP2
	Windows 2000	Server SP1
		SP4
		Server SP0

References

CVE ID: 2006-4688 (see also: NVD)
Secunia Advisory ID: 22866
SCIP VulDB ID: 2686
ISS X-Force ID: 29952
Metasploit ID: 30260
Related OSVDB ID: 30261
Microsoft Knowledge Base Article: 923980
VUPEN Advisory: ADV-2006-4504
Mail List Post: http://archives.neohapsis.com/archives/fulldisclosure/2006-11/0273.html
Generic Exploit URL: http://immunitysec.com
http://www.saintcorporation.com/cgi-bin/exploit_info/microsoft_netware_treename
Microsoft Security Bulletin: MS06-066

Tools & Filters

Snort	16016
	23643
	ms06_066

Credit

Peter Winter-Smith - NGS Software

CVSSv2 Score

CVSSv2 Base Score = 7.5
Source: nvd.nist.gov | Generated: 2006-11-15 | Disagree?

Comments

Add Comment Hide Add Comment

No Comments.

The database information may change without any notice. Use of the information constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the copyright holder or distributor (OSVDB or OSF) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.