CVE-2006-4696: Code Injection

Published Oct 10, 2006

Updated

Unspecified vulnerability in the Server service in Microsoft Windows 2000 SP4, Server 2003 SP1 and earlier, and XP SP2 and earlier allows remote attackers to execute arbitrary code via a crafted packet, aka "SMB Rename Vulnerability."

Affected Software

6 affected components

Microsoft Windows XP=sp1

Microsoft Windows 2003 Server=sp1

Microsoft Windows 2003 Server=r2

Microsoft Windows 2000=sp4

Microsoft Windows XP=sp2

Microsoft Windows XP=gold

Remediation

Patch Available

http://securitytracker.com/id?1017035

Event History

Oct 10, 2006

CVE Published

10:07 PM

Data Sourced

via NVD·10:07 PM

RemedyDescriptionSeverityWeaknessAffected Software

Oct 11, 2006

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2006-4696?

CVE-2006-4696 is considered critical due to its potential for remote code execution.

How do I fix CVE-2006-4696?

To fix CVE-2006-4696, apply the latest security patches provided by Microsoft for your affected Windows version.

What software versions are affected by CVE-2006-4696?

CVE-2006-4696 affects Microsoft Windows 2000 SP4, Windows XP SP1 and SP2, and Windows Server 2003 SP1 and earlier.

Is CVE-2006-4696 actively exploited?

At the time of its disclosure, CVE-2006-4696 was a vulnerability that could be exploited, requiring immediate attention.

What type of vulnerability is CVE-2006-4696?

CVE-2006-4696 is classified as a remote code execution vulnerability within the Server service of affected Windows operating systems.