CVE-2008-3466

CRITIQUE 10.0CVE-2008-3466 · Published 15/10/2008 · updated 16/06/2026

En bref

CVE-2008-3466 est une vulnérabilité CRITIQUE (CVSS 10.0).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 77.7%, plus élevée que 99.6% des vulnérabilités.
Aucune version corrigée n'est encore connue : suivez l'avis de l'éditeur dans les références.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

Microsoft Host Integration Server (HIS) 2000, 2004, and 2006 does not limit RPC access to administrative functions, which allows remote attackers to bypass authentication and execute arbitrary programs via a crafted SNA RPC message using opcode 1 or 6 to call the CreateProcess function, aka "HIS Command Execution Vulnerability."

References

labs.idefense.com/intelligence/vulnerabilities/display.php
marc.info
secunia.com/advisories/32233 · Patch
securityfocus.com/bid/31620 · Exploit
securitytracker.com/id
us-cert.gov/cas/techalerts/TA08-288A.html · US Government Resource
vupen.com/english/advisories/2008/2810
docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-059
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6075

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free