host integration server 2006 (microsoft) — Vulnerabilities

Signals

Monitoring NVD, CISA KEV, EPSS and the Dragons Community ransomware tracker in near-real timeMonitoring NVD, CISA KEV, EPSS and the Dragons Community ransomware tracker in near-real time

Vendors · microsoft · host integration server 2006

host integration server 2006

· 1 CVEsmicrosoft · 1 known vulnerabilities

Total

Critical

High

Medium

CISA KEV

CVE-2008-3466

Oct 14, 2008

Microsoft Host Integration Server (HIS) 2000, 2004, and 2006 does not limit RPC access to administrative functions, which allows remote attackers to bypass authentication and execute arbitrary programs via a crafted SNA RPC message using opcode 1 or 6 to call the CreateProcess function, aka "HIS Command Execution Vulnerability."

All microsoft products All Vendors CVE Database KEV Catalog