CVE-2008-3466

Microsoft Host Integration Server 2000, 2004, 2006 - Unauthenticated Remote Code Execution via SNA RPC Message

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2008-3466. PoCs published by MC, including Metasploit module auxiliary/admin/ms/ms08_059_his2006.

AI-analyzed exploit summary This Metasploit module exploits a command injection vulnerability in Microsoft Host Integration Server 2006 via DCERPC. It binds to the RPC service and executes arbitrary commands by calling the vulnerable `_SnaRpcService_RunExecutable` function (opcode 0x01).

Description

Microsoft Host Integration Server (HIS) 2000, 2004, and 2006 does not limit RPC access to administrative functions, which allows remote attackers to bypass authentication and execute arbitrary programs via a crafted SNA RPC message using opcode 1 or 6 to call the CreateProcess function, aka "HIS Command Execution Vulnerability."

Exploits (1)

metasploit WORKING POC

by MC · rubypoc

https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/ms/ms08_059_his2006.rb

View Code ZIP pw:eip

This Metasploit module exploits a command injection vulnerability in Microsoft Host Integration Server 2006 via DCERPC. It binds to the RPC service and executes arbitrary commands by calling the vulnerable `_SnaRpcService_RunExecutable` function (opcode 0x01).

Classification

Working Poc 95%

Attack Type

Rce

Complexity

Moderate

Reliability

Reliable

Target: Microsoft Host Integration Server 2006

No auth needed

Prerequisites: Network access to the target's RPC service · DCERPC endpoint discovery

MITRE ATT&CK