Anfälligkeitssuche        Suche in 324607 CVE Beschreibungen
und 145615 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.108779
Kategorie:Huawei
Titel:Huawei Data Communication: RCE Vulnerability in Microsoft Windows Server Service (huawei-sa-20171129-01-windows)
Zusammenfassung:Microsoft released a security bulletin MS08-067 to disclose a vulnerability in the Server service.;; This VT has been deprecated and is therefore no longer functional.
Beschreibung:Summary:
Microsoft released a security bulletin MS08-067 to disclose a vulnerability in the Server service.

This VT has been deprecated and is therefore no longer functional.

Vulnerability Insight:
Microsoft released a security bulletin MS08-067 to disclose a vulnerability in the Server service. An unauthenticated, remote attacker may send a specially crafted RPC request to the affected products. Successful exploit may result in arbitrary code execution. (Vulnerability ID: HWPSIRT-2017-05167)This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2008-4250.Huawei has released software updates to fix this vulnerability. This advisory is available in the linked references.

Vulnerability Impact:
Successful exploit may result in arbitrary code execution.

Affected Software/OS:
AnyOffice versions V200R002C10 V200R002C20 V200R005C02

SMC2.0 versions V100R003C10 V500R002C00

Solution:
See the referenced vendor advisory for a solution.

CVSS Score:
10.0

CVSS Vector:
AV:N/AC:L/Au:N/C:C/I:C/A:C

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2008-4250
BugTraq ID: 31874
http://www.securityfocus.com/bid/31874
Bugtraq: 20081026 Windows RPC MS08-067 FAQ document released (Google Search)
http://www.securityfocus.com/archive/1/497808/100/0/threaded
Bugtraq: 20081027 Windows RPC MS08-067 FAQ document updated (Google Search)
http://www.securityfocus.com/archive/1/497816/100/0/threaded
Cert/CC Advisory: TA08-297A
http://www.us-cert.gov/cas/techalerts/TA08-297A.html
Cert/CC Advisory: TA09-088A
http://www.us-cert.gov/cas/techalerts/TA09-088A.html
CERT/CC vulnerability note: VU#827267
http://www.kb.cert.org/vuls/id/827267
https://www.exploit-db.com/exploits/6824
https://www.exploit-db.com/exploits/6841
https://www.exploit-db.com/exploits/7104
https://www.exploit-db.com/exploits/7132
HPdes Security Advisory: HPSBST02386
http://marc.info/?l=bugtraq&m=122703006921213&w=2
HPdes Security Advisory: SSRT080164
http://blogs.securiteam.com/index.php/archives/1150
Microsoft Security Bulletin: MS08-067
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-067
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6093
http://www.securitytracker.com/id?1021091
http://secunia.com/advisories/32326
http://www.vupen.com/english/advisories/2008/2902
XForce ISS Database: win-server-rpc-code-execution(46040)
https://exchange.xforce.ibmcloud.com/vulnerabilities/46040
CopyrightCopyright (C) 2020 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2025 E-Soft Inc. Alle Rechte vorbehalten.