PT-2008-4865 · Microsoft · Host Integration Server

Stephen Fewer · Publicado 2008-10-15 · Atualizado 2018-10-12 · CVE-2008-3466

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Host Integration Server (HIS) versions 2000 through 2006

Description The issue allows remote attackers to bypass authentication and execute arbitrary programs via a crafted SNA RPC message using opcode 1 or 6 to call the CreateProcess function.

Recommendations For Microsoft Host Integration Server (HIS) versions 2000 through 2006, consider restricting RPC access to administrative functions as a temporary workaround until a patch is available.

Exploit

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2008-3466

Produtos afetados

Host Integration Server

Referências · 11

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/ms/ms08_059_his2006.rb · Exploit
• 🔥 http://securityfocus.com/bid/31620 · Exploit
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=745 · Nota
• http://us-cert.gov/cas/techalerts/TA08-288A.html · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-059 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2008-3466 · Nota de Segurança
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6075 · Nota
• http://secunia.com/advisories/32233 · Aviso do Fabricante
• http://securitytracker.com/id?1021043 · Nota
• http://marc.info/?l=bugtraq&m=122479227205998&w=2 · Aviso do Fabricante
• http://vupen.com/english/advisories/2008/2810 · Nota