← volver
CVE-2008-3466

CVE-2008-3466

40Vexday Risk Score

Corrige pronto. Ella tiene exploit funcional público.

ssvc Attendepss 78%
de la publicación al arma0 días
Publicada en NVD15 oct
metasploit14 oct
probabilidad de explotación
78%top 1% de las CVE
explotación observada
noninguna fuente lo reporta
Microsoft Host Integration Server (HIS) 2000, 2004, and 2006 does not limit RPC access to administrative functions, which allows remote attackers to bypass authentication and execute arbitrary programs via a crafted SNA RPC message using opcode 1 or 6 to call the CreateProcess function, aka "HIS Command Execution Vulnerability."
Productos afectados
n/a · n/a
Referencias
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=745http://marc.info/?l=bugtraq&m=122479227205998&w=2https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-059http://secunia.com/advisories/32233https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6075http://www.securityfocus.com/bid/31620http://www.securitytracker.com/id?1021043http://www.us-cert.gov/cas/techalerts/TA08-288A.htmlhttp://www.vupen.com/english/advisories/2008/2810