← voltar
CVE-2008-3466

CVE-2008-3466

40Vexday Risk Score

Corrija em breve. Ela tem exploit funcional público.

ssvc Attendepss 78%
da publicação à arma0 dias
Publicada no NVD15 de out.
metasploit14 de out.
probabilidade de exploração
78%top 1% das CVEs
exploração observada
nãonenhuma fonte reporta
Microsoft Host Integration Server (HIS) 2000, 2004, and 2006 does not limit RPC access to administrative functions, which allows remote attackers to bypass authentication and execute arbitrary programs via a crafted SNA RPC message using opcode 1 or 6 to call the CreateProcess function, aka "HIS Command Execution Vulnerability."
Produtos afetados
n/a · n/a
Referências
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=745http://marc.info/?l=bugtraq&m=122479227205998&w=2https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-059http://secunia.com/advisories/32233https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6075http://www.securityfocus.com/bid/31620http://www.securitytracker.com/id?1021043http://www.us-cert.gov/cas/techalerts/TA08-288A.htmlhttp://www.vupen.com/english/advisories/2008/2810