> Code for MS06-036 is public, but we have two problems with it: > 1) The framework would need to run as root (or have BIND_SERVICE and > CAP_NET_RAW capabilities under Linux) in order to trigger the bug. Isn't it the case already for some modules, like smb_sniffer ? Regards, - Nicolas RUFF