This host is missing important security update according to Microsoft Bulletin MS06-040.

Successful exploitation could allow remote code execution by sending a specially crafted RPC request and can take complete control of an affected system. Impact Level: System

Run Windows Update and update the listed hotfixes or download and update mentioned hotfixes in the advisory from the below link. http://technet.microsoft.com/en-us/security/bulletin/ms06-040

The flaw is due to a boundary error in the 'CanonicalizePathName()' function in netapi32.dll and can be exploited to cause a stack-based buffer overflow via a malicious NetrpPathCanonicalize RPC request with an overly long path name to the Server Service.

Microsoft Windows XP Service Pack 2 and prior Microsoft Windows 2K3 Service Pack 1 and prior Microsoft Windows 2000 Service Pack 4 and prior.

• http://secunia.com/advisories/21388/
• http://securitytracker.com/id?1016667
• http://technet.microsoft.com/en-us/security/bulletin/ms06-040

---

Updated on 2015-03-25