Description
Buffer overflow in Client Service for NetWare (CSNW) in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 up to SP1 allows remote attackers to execute arbitrary code via crafted messages, aka "Client Service for NetWare Memory Corruption Vulnerability."
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Metasploit 2 modules
-
MS06-066 Microsoft Services nwapi32.dll Module Exploit
exploit/windows/smb/ms06_066_nwapi
-
MS06-066 Microsoft Services nwwks.dll Module Exploit
exploit/windows/smb/ms06_066_nwwks
Exploit-DB 2
- Microsoft Services - 'nwapi32.dll' (MS06-066) (Metasploit) EDB-16373 · remote · Aug 25, 2010 · verified
- Microsoft Services - 'nwwks.dll' (MS06-066) (Metasploit) EDB-16369 · remote · May 9, 2010 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- 1017224 vdb-entry
- TA06-318A third-party-advisory
- 21023 vdb-entry
- MS06-066 vendor-advisory
- ADV-2006-4504 vdb-entry
- oval:org.mitre.oval:def:404 vdb-entry signature
- 20061116 Vulnerabilities in Client Service for NetWare mailing-list
- ms-csnw-bo(29952) vdb-entry
- 22866 third-party-advisory