CVE-2006-3439

Related Files

Microsoft Server Service NetpwPathCanonicalize Overflow

Posted Nov 26, 2009

Authored by H D Moore | Site metasploit.com

This Metasploit module exploits a stack overflow in the NetApi32 CanonicalizePathName() function using the NetpwPathCanonicalize RPC call in the Server Service. It is likely that other RPC calls could be used to exploit this service. This exploit will result in a denial of service on on Windows XP SP2 or Windows 2003 SP1. A failed exploit attempt will likely result in a complete reboot on Windows 2000 and the termination of all SMB-related services on Windows XP. The default target for this exploit should succeed on Windows NT 4.0, Windows 2000 SP0-SP4+, Windows XP SP0-SP1 and Windows 2003 SP0.

tags | exploit, denial of service, overflow

systems | windows

advisories | CVE-2006-3439

SHA-256 | f304ff367f431dfac7b97723e8ececdc2561af58e238d7424a938dd58f43af92

Download | Favorite | View