Microsoft Host Integration Server RPC远程命令执行漏洞（MS08-059）

BUGTRAQ ID: 31620 CVECAN ID: CVE-2008-3466 Host Integration Server通过提供应用、数据和网络集成特性，将Microsoft Windows扩展至其它系统。 Host Integration Server的RPC接口所暴露的一些方式允许未经认证的攻击者在服务器上执行任意程序。RPC opcodes 1和6都允许攻击者调用CreateProcess函数并向其传送命令行，这可能导致完全入侵服务器。 Microsoft Host Integration Server 2006 Microsoft Host Integration...

CVE-2008-3466

Microsoft Host Integration Server HIS 2000, 2004, and 2006 does not limit RPC access to administrative functions, which allows remote attackers to bypass authentication and execute arbitrary programs via a crafted SNA RPC message using opcode 1 or 6 to call the CreateProcess function, aka "HIS...

Authentication flaw

Microsoft Host Integration Server HIS 2000, 2004, and 2006 does not limit RPC access to administrative functions, which allows remote attackers to bypass authentication and execute arbitrary programs via a crafted SNA RPC message using opcode 1 or 6 to call the CreateProcess function, aka "HIS...

Immunity Canvas: MS08_059

Name| ms08059 ---|--- CVE| CVE-2008-3466 Exploit Pack| CANVAS Description| Microsoft Host Integration Server RPC Interface Vulnerability Notes| References: http://www.microsoft.com/technet/security/Bulletin/ms08-059.mspx CVE Name: CVE-2008-3466 VENDOR: Microsoft Notes: MSADV: MS08-059 Date public...

Microsoft Host Integration Server SNA RPC authentication bypass

Added: 10/15/2008 CVE: CVE-2008-3466 BID: 31620 OSVDB: 49068 Background Microsoft Host Integration Server is an enabling technology which allows integration of applications and data with new Windows solutions. Problem A vulnerability in Microsoft Host Integration Server allows remote...

MS08-059: Microsoft Host Integration Server (HIS) SNA RPC Request Remote Overflow (956695)

The remote host has HIS Host Integration Server installed. The version of this product contains a code execution vulnerability in its RPC interface. An attacker could exploit this flaw to execute arbitrary code on the remote host by making rogue RPC queries. C Tenable Network Security, Inc...

MS08-059: Microsoft Host Integration Server (HIS) SNA RPC Request Remote Overflow (956695) (uncredentialed check)

The remote host has HIS Host Integration Server installed. The remote version of this product is affected by a code execution vulnerability in its RPC interface. An attacker could exploit this flaw to execute arbitrary code on the remote host by making rogue RPC queries. C Tenable Network Securit...

CVE-2008-3466

Microsoft Host Integration Server HIS 2000, 2004, and 2006 does not limit RPC access to administrative functions, which allows remote attackers to bypass authentication and execute arbitrary programs via a crafted SNA RPC message using opcode 1 or 6 to call the CreateProcess function, aka "HIS...

Microsoft Host Integration Server SNA RPC authentication bypass

Added: 10/15/2008 CVE: CVE-2008-3466 BID: 31620 OSVDB: 49068 Background Microsoft Host Integration Server is an enabling technology which allows integration of applications and data with new Windows solutions. Problem A vulnerability in Microsoft Host Integration Server allows remote...

Host Integration Server RPC Service Remote Code Execution Vulnerability (956695)

This host is missing a critical security update according to Microsoft Bulletin MS08-059. OpenVAS Vulnerability Test $Id: secpodms08-059900049.nasl 5344 2017-02-18 17:43:17Z cfi $ Description: Host Integration Server RPC Service Remote Code Execution Vulnerability 956695 Authors: Chandan S...

CVE-2008-3466

CVE-2008-3466 affects Microsoft Host Integration Server 2000, 2004, and 2006. The flaw resides in the SNA RPC service which does not properly restrict administrative RPC calls, enabling a remote attacker to bypass authentication and execute arbitrary code via a crafted SNA RPC message that calls ...

iDefense Security Advisory 10.14.08: Microsoft Host Integration Server 2006 Command Execution Vulnerability

iDefense Security Advisory 10.14.08 http://labs.idefense.com/intelligence/vulnerabilities/ Oct 14, 2008 I. BACKGROUND The Host Integration Server is an application suite that is used to communicate with IBM mainframe servers. One of the components of the suite is a remote management interface. Th...

Microsoft Host Integration Server buffer overflow

Buffer overflow in RPC-based service...

Microsoft Host Integration Server SNA RPC authentication bypass

Added: 10/15/2008 CVE: CVE-2008-3466 BID: 31620 OSVDB: 49068 Background Microsoft Host Integration Server is an enabling technology which allows integration of applications and data with new Windows solutions. Problem A vulnerability in Microsoft Host Integration Server allows remote...

Microsoft Host Integration Server SNA RPC authentication bypass

Added: 10/15/2008 CVE: CVE-2008-3466 BID: 31620 OSVDB: 49068 Background Microsoft Host Integration Server is an enabling technology which allows integration of applications and data with new Windows solutions. Problem A vulnerability in Microsoft Host Integration Server allows remote...

Microsoft Security Bulletin MS08-059 – Critical Vulnerability in Host Integration Server RPC Service Could Allow Remote Code Execution (956695)

Microsoft Security Bulletin MS08-059 – Critical Vulnerability in Host Integration Server RPC Service Could Allow Remote Code Execution 956695 Published: October 14, 2008 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in Microsof...

Microsoft Host Integration Server RPC Remote Command Execution Vulnerability

Description Microsoft Windows is prone to a remote command-execution vulnerability in the SNA service through a remote procedure call RPC. Successfully exploiting this issue would allow an attacker to execute arbitrary commands on an affected computer in the context of the affected service...

Microsoft Host Integration Server 2006 Command Execution Vulnerability

This module exploits a command-injection vulnerability in Microsoft Host Integration Server 2006. Module Options msf use auxiliary/admin/ms/ms08/059his2006 msf undefined059his2006 show actions ...actions... msf undefined059his2006 set ACTION msf undefined059his2006 show options ...show and set...

Microsoft Host Integration Server Remote Command Execution (MS08-059; CVE-2008-3466)

Microsoft Host Integration Server HIS is a gateway application that provides host access and integration, extending Microsoft Windows to other systems by integrating mission-critical host applications, data sources, messaging, and security systems. A remote code execution vulnerability has been...

ZDI-07-060: HP OpenView Radia Integration Server File System Exposure Vulnerability

ZDI-07-060: HP OpenView Radia Integration Server File System Exposure Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-060.html October 23, 2007 -- CVE ID: CVE-2007-5413 -- Affected Vendor: Hewlett-Packard -- Affected Products: HP OpenView Radia Integration Server -- TippingPointT...