PT-2008-4865 · Microsoft · Host Integration Server

Stephen Fewer · Published 2008-10-15 · Updated 2018-10-12 · CVE-2008-3466

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Host Integration Server (HIS) versions 2000 through 2006

Description The issue allows remote attackers to bypass authentication and execute arbitrary programs via a crafted SNA RPC message using opcode 1 or 6 to call the CreateProcess function.

Recommendations For Microsoft Host Integration Server (HIS) versions 2000 through 2006, consider restricting RPC access to administrative functions as a temporary workaround until a patch is available.

Exploit

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2008-3466

Affected Products

Host Integration Server

References · 11

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/ms/ms08_059_his2006.rb · Exploit
• 🔥 http://securityfocus.com/bid/31620 · Exploit
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-059 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-3466 · Security Note
• http://secunia.com/advisories/32233 · Vendor Advisory
• http://marc.info/?l=bugtraq&m=122479227205998&w=2 · Vendor Advisory
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=745 · Note
• http://us-cert.gov/cas/techalerts/TA08-288A.html · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6075 · Note
• http://securitytracker.com/id?1021043 · Note
• http://vupen.com/english/advisories/2008/2810 · Note