CVE-2006-4691

🗓️ 14 Nov 2006 21:00:00Reported by microsoftType

cve🔗 web.nvd.nist.gov👁 97 Views🌐 WEB

Stack-based buffer overflow in NetpManageIPCConnect function in Microsoft Window

Reporter	Title	Published	Views	Family All 20
Circl	CVE-2006-4691	5 Oct 201000:00	–	circl
Check Point Advisories	Microsoft Windows Workstation Service Buffer Overflow (MS06-070; CVE-2006-4691)	23 Nov 200600:00	–	checkpoint_advisories
Check Point Advisories	Update Protection against Workstation Service Buffer Overflow Vulnerability (MS06-070)	30 Nov 200600:00	–	checkpoint_advisories
Cvelist	CVE-2006-4691	14 Nov 200621:00	–	cvelist
Exploit DB	Microsoft Workstation Service - NetpManageIPCConnect Overflow (MS06-070) (Metasploit)	5 Oct 201000:00	–	exploitdb
Exploit DB	Microsoft Windows - NetpManageIPCConnect Stack Overflow (MS06-070)	16 Nov 200600:00	–	exploitdb
Exploit DB	Microsoft Windows - Wkssvc NetrJoinDomain2 Stack Overflow (MS06-070)	17 Nov 200600:00	–	exploitdb
Exploit DB	Microsoft Windows - 'NetpManageIPCConnect' Remote Stack Overflow (MS06-070)	18 Nov 200600:00	–	exploitdb
canvas	Immunity Canvas: MS06_070	14 Nov 200621:07	–	canvas
Metasploit	MS06-070 Microsoft Workstation Service NetpManageIPCConnect Overflow	14 Nov 200600:00	–	metasploit

NVD

Node

OR

microsoft windows_2000sp4fr

microsoft windows_xpsp2tablet_pc

Source	Link
securityfocus	www.securityfocus.com/archive/1/451588/100/0/threaded
oval	www.oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A607
oval	www.oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A908
vupen	www.vupen.com/english/advisories/2006/4508
research	www.research.eeye.com/html/advisories/published/AD20061114.html
docs	www.docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-070
secunia	www.secunia.com/advisories/22883
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/29948
us-cert	www.us-cert.gov/cas/techalerts/TA06-318A.html
kb	www.kb.cert.org/vuls/id/778036

Parameter	Position	Path	Description	CWE
arg_1	request body	\PIPE\WKSSVC	Stack-based buffer overflow in NetpManageIPCConnect via NetrJoinDomain2 RPC calls to the Workstation service (wkssvc.dll), enabling remote code execution with a long hostname on Windows 2000 SP4/XP SP2.
arg_2	request body	\PIPE\WKSSVC	Stack-based buffer overflow in NetpManageIPCConnect via NetrJoinDomain2 RPC calls to the Workstation service (wkssvc.dll), enabling remote code execution with a long hostname on Windows 2000 SP4/XP SP2.
arg_3	request body	\PIPE\WKSSVC	Stack-based buffer overflow in NetpManageIPCConnect via NetrJoinDomain2 RPC calls to the Workstation service (wkssvc.dll), enabling remote code execution with a long hostname on Windows 2000 SP4/XP SP2.
arg_4	request body	\PIPE\WKSSVC	Stack-based buffer overflow in NetpManageIPCConnect via NetrJoinDomain2 RPC calls to the Workstation service (wkssvc.dll), enabling remote code execution with a long hostname on Windows 2000 SP4/XP SP2.
arg_5	request body	\PIPE\WKSSVC	Stack-based buffer overflow in NetpManageIPCConnect via NetrJoinDomain2 RPC calls to the Workstation service (wkssvc.dll), enabling remote code execution with a long hostname on Windows 2000 SP4/XP SP2.
arg_6	request body	\PIPE\WKSSVC	Stack-based buffer overflow in NetpManageIPCConnect via NetrJoinDomain2 RPC calls to the Workstation service (wkssvc.dll), enabling remote code execution with a long hostname on Windows 2000 SP4/XP SP2.

16 Jun 2026 22:29Current

7.7High risk

Vulners AI Score7.7

CVSS 210

EPSS0.79962

cve-2006-4691 buffer overflow netpmanageipcconnect workstation service wkssvc.dll microsoft windows remote code execution netrjoindomain2 rpc nvd