312 matches found
Host Integration Server RPC Service Remote Code Execution Vulnerability (956695)
This host is missing a critical security update according to Microsoft Bulletin MS08-059. OpenVAS Vulnerability Test $Id: secpodms08-059900049.nasl 5344 2017-02-18 17:43:17Z cfi $ Description: Host Integration Server RPC Service Remote Code Execution Vulnerability 956695 Authors: Chandan S...
CVE-2008-3466
CVE-2008-3466 affects Microsoft Host Integration Server 2000, 2004, and 2006. The flaw resides in the SNA RPC service which does not properly restrict administrative RPC calls, enabling a remote attacker to bypass authentication and execute arbitrary code via a crafted SNA RPC message that calls ...
CVE-2008-3466
Microsoft Host Integration Server HIS 2000, 2004, and 2006 does not limit RPC access to administrative functions, which allows remote attackers to bypass authentication and execute arbitrary programs via a crafted SNA RPC message using opcode 1 or 6 to call the CreateProcess function, aka "HIS...
Microsoft Host Integration Server buffer overflow
Buffer overflow in RPC-based service...
iDefense Security Advisory 10.14.08: Microsoft Host Integration Server 2006 Command Execution Vulnerability
iDefense Security Advisory 10.14.08 http://labs.idefense.com/intelligence/vulnerabilities/ Oct 14, 2008 I. BACKGROUND The Host Integration Server is an application suite that is used to communicate with IBM mainframe servers. One of the components of the suite is a remote management interface. Th...
Microsoft Host Integration Server SNA RPC authentication bypass
Added: 10/15/2008 CVE: CVE-2008-3466 BID: 31620 OSVDB: 49068 Background Microsoft Host Integration Server is an enabling technology which allows integration of applications and data with new Windows solutions. Problem A vulnerability in Microsoft Host Integration Server allows remote...
Microsoft Host Integration Server SNA RPC authentication bypass
Added: 10/15/2008 CVE: CVE-2008-3466 BID: 31620 OSVDB: 49068 Background Microsoft Host Integration Server is an enabling technology which allows integration of applications and data with new Windows solutions. Problem A vulnerability in Microsoft Host Integration Server allows remote...
Microsoft Host Integration Server RPC Remote Command Execution Vulnerability
Description Microsoft Windows is prone to a remote command-execution vulnerability in the SNA service through a remote procedure call RPC. Successfully exploiting this issue would allow an attacker to execute arbitrary commands on an affected computer in the context of the affected service...
Microsoft Security Bulletin MS08-059 – Critical Vulnerability in Host Integration Server RPC Service Could Allow Remote Code Execution (956695)
Microsoft Security Bulletin MS08-059 – Critical Vulnerability in Host Integration Server RPC Service Could Allow Remote Code Execution 956695 Published: October 14, 2008 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in Microsof...
Microsoft Host Integration Server Remote Command Execution (MS08-059; CVE-2008-3466)
Microsoft Host Integration Server HIS is a gateway application that provides host access and integration, extending Microsoft Windows to other systems by integrating mission-critical host applications, data sources, messaging, and security systems. A remote code execution vulnerability has been...
ZDI-07-060: HP OpenView Radia Integration Server File System Exposure Vulnerability
ZDI-07-060: HP OpenView Radia Integration Server File System Exposure Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-060.html October 23, 2007 -- CVE ID: CVE-2007-5413 -- Affected Vendor: Hewlett-Packard -- Affected Products: HP OpenView Radia Integration Server -- TippingPointT...
HP OpenView Radia Integration Server directory traversal
It's possible to access different directories by using constructions like root in TCP/3465 webserver...
Hewlett-Packard OpenView Radia Integration Server File System Exposure Vulnerability
This vulnerability allows remote attackers to access arbitrary files on systems with vulnerable installations of Hewlett-Packard OpenView Radia Integration Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HTTP server bound by default to TCP...
Design/Logic Flaw
httpd.tkd in Radia Integration Server in Hewlett-Packard HP OpenView Configuration Management CM Infrastructure 4.0 through 4.2i and Client Configuration Manager CCM 2.0 allows remote attackers to read arbitrary files via URLs containing tilde references to home directories, as demonstrated by ro...
Directory traversal
Directory traversal vulnerability in SAP Business Connector BC 4.6 and 4.7 allows remote attackers to read or delete arbitrary files via the fullName parameter to 1 sapbc/SAP/chopSAPLog.dsp or 2 invoke/sap.monitor.rfcTrace/deleteSingle. Details will be updated after the grace period has ended...
CVE-2006-0732
Directory traversal vulnerability in SAP Business Connector BC 4.6 and 4.7 allows remote attackers to read or delete arbitrary files via the fullName parameter to 1 sapbc/SAP/chopSAPLog.dsp or 2 invoke/sap.monitor.rfcTrace/deleteSingle. Details will be updated after the grace period has ended...
CVE-2006-0732
Directory traversal vulnerability in SAP Business Connector BC 4.6 and 4.7 allows remote attackers to read or delete arbitrary files via the fullName parameter to 1 sapbc/SAP/chopSAPLog.dsp or 2 invoke/sap.monitor.rfcTrace/deleteSingle. Details will be updated after the grace period has ended...
Host Integration Server.2006.EN
detectoid for product locale of EN...