CVE-2008-3466 Auth bypass in n/a
Remote attackers can bypass authentication and execute arbitrary programs on Microsoft Host Integration Server via crafted SNA RPC messages.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2008-3466?
CVE-2008-3466 is a critical authentication bypass vulnerability in n/a, published on 15 Oct 2008. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Microsoft Host Integration Server (HIS) 2000, 2004, and 2006 does not limit RPC access to administrative functions, which allows remote attackers to bypass authentication and execute arbitrary programs via a crafted SNA RPC message using opcode 1 or 6 to call the CreateProcess function, aka "HIS Command Execution Vulnerability."
Weakness: CWE-287
Which versions are affected by CVE-2008-3466?
It affects 3 products.
Products include Microsoft Host Integration Server 2000, Microsoft Host Integration Server 2004, Microsoft Host Integration Server 2006.
How do I fix CVE-2008-3466?
No fix has been published for CVE-2008-3466 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2008-3466 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2008-3466 exists.
Public exploit code: 1 Metasploit module.
Sources
Also known as GHSA-xw33-f5cf-9cw7.