[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fSUIJ1WaNcwDL9dn0tsK_KKup2WqiHLQb5lFqOxsv4mw":3,"g5a-risk:CVE-2008-3466":171},{"success":4,"data":5,"meta":169},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":32,"epssPercentile":28,"epssTimeSeries":33,"severity":34,"affectedProducts":35,"affectedProductsCount":47,"references":48,"referencesCount":107,"weaknesses":108,"weaknessesCount":116,"isActivelyExploited":30,"cisaInfo":28,"otxData":28,"relatedBlogPosts":117,"seoMetadata":118,"configurations":143,"relatedVendorCves":167,"notableEvents":168},"CVE-2008-3466","What is CVE-2008-3466?","Microsoft Host Integration Server (HIS) 2000, 2004, and 2006 does not limit RPC access to administrative functions, which allows remote attackers to bypass authentication and execute arbitrary programs via a crafted SNA RPC message using opcode 1 or 6 to call the CreateProcess function, aka \"HIS Command Execution Vulnerability.\"","Microsoft Host Integration Server (HIS) 2000, 2004, and 2006 does not limit RPC access to administrative functions, which allows remote attackers to bypass a...","2008-10-15T00:12:15.74","2026-06-16T22:55:52.883",10,"AV:N\u002FAC:L\u002FAu:N\u002FC:C\u002FI:C\u002FA:C",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":17,"CVSSMetricV40":31},[],[],[18],{"Source":19,"Type":20,"CVSSData":21,"BaseSeverity":29,"ExploitabilityScore":12,"ImpactScore":12,"ACInsufInfo":30,"ObtainAllPrivilege":4,"ObtainUserPrivilege":30,"ObtainOtherPrivilege":30,"UserInteractionRequired":30},"nvd@nist.gov","Primary",{"Version":22,"VectorString":13,"AccessVector":23,"AccessComplexity":24,"Authentication":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"Exploitability":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"CollateralDamagePotential":28,"TargetDistribution":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"EnvironmentalScore":28},"2.0","NETWORK","LOW","NONE","COMPLETE","",null,"HIGH",false,[],0.77741,[32,32,32,32,32,32,32],"Critical",[36,41,44],{"vendor":37,"product":38,"version":39,"criteria":40,"vulnerable":4},"microsoft","host_integration_server_2000","*","cpe:2.3:a:microsoft:host_integration_server_2000:*:*:*:*:client:*:*:*",{"vendor":37,"product":42,"version":39,"criteria":43,"vulnerable":4},"host_integration_server_2004","cpe:2.3:a:microsoft:host_integration_server_2004:*:*:*:*:client:*:*:*",{"vendor":37,"product":45,"version":39,"criteria":46,"vulnerable":4},"host_integration_server_2006","cpe:2.3:a:microsoft:host_integration_server_2006:*:*:*:*:*:*:x64:*",3,[49,53,57,63,68,72,77,81,85,89,91,93,95,97,99,101,103,105],{"url":50,"source":51,"tags":52},"http:\u002F\u002Flabs.idefense.com\u002Fintelligence\u002Fvulnerabilities\u002Fdisplay.php?id=745","Idefense",[],{"url":54,"source":55,"tags":56},"http:\u002F\u002Fmarc.info\u002F?l=bugtraq&m=122479227205998&w=2","Marc",[],{"url":58,"source":59,"tags":60},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F32233","Secunia",[61,62],"Patch","Vendor Advisory",{"url":64,"source":65,"tags":66},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F31620","Securityfocus",[67,61],"Exploit",{"url":69,"source":70,"tags":71},"http:\u002F\u002Fwww.securitytracker.com\u002Fid?1021043","Securitytracker",[],{"url":73,"source":74,"tags":75},"http:\u002F\u002Fwww.us-cert.gov\u002Fcas\u002Ftechalerts\u002FTA08-288A.html","Us-cert",[76],"US Government Resource",{"url":78,"source":79,"tags":80},"http:\u002F\u002Fwww.vupen.com\u002Fenglish\u002Fadvisories\u002F2008\u002F2810","Vupen",[],{"url":82,"source":83,"tags":84},"https:\u002F\u002Fdocs.microsoft.com\u002Fen-us\u002Fsecurity-updates\u002Fsecuritybulletins\u002F2008\u002Fms08-059","Microsoft",[],{"url":86,"source":87,"tags":88},"https:\u002F\u002Foval.cisecurity.org\u002Frepository\u002Fsearch\u002Fdefinition\u002Foval%3Aorg.mitre.oval%3Adef%3A6075","Cisecurity",[],{"url":50,"source":51,"tags":90},[],{"url":54,"source":55,"tags":92},[],{"url":58,"source":59,"tags":94},[61,62],{"url":64,"source":65,"tags":96},[67,61],{"url":69,"source":70,"tags":98},[],{"url":73,"source":74,"tags":100},[76],{"url":78,"source":79,"tags":102},[],{"url":82,"source":83,"tags":104},[],{"url":86,"source":87,"tags":106},[],18,[109],{"id":110,"name":111,"description":112,"extendedDescription":27,"status":113,"abstraction":114,"structure":115},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","Draft","Class","Simple",1,[],{"title":119,"metaDescription":120,"keywords":121,"canonicalUrl":122,"structuredData":123},"What is CVE-2008-3466? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2008-3466, a critical severity cyber security vulnerability from 2008. High exploit probability (77.7%). Microsoft Host Integra...","CVE-2008-3466, CVE-2008-3466 vulnerability, CVE-2008-3466 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2008, CVSS score, exploit, patch, remediation, microsoft security, host_integration_server_2000 vulnerability, host_integration_server_2004 vulnerability, host_integration_server_2006 vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2008-3466",{"@context":124,"@type":125,"headline":119,"description":120,"datePublished":10,"dateModified":11,"author":126,"publisher":130,"about":134,"mainEntityOfPage":138,"articleSection":141,"keywords":142},"https:\u002F\u002Fschema.org","TechArticle",{"@type":127,"name":128,"url":129},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":127,"name":128,"url":129,"logo":131},{"@type":132,"url":133},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":135,"name":6,"description":136,"additionalType":137},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":139,"@id":140},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2008-3466","Cybersecurity","CVE-2008-3466, CVE-2008-3466 vulnerability, CVE-2008-3466 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[144],{"Operator":28,"Negate":28,"Nodes":145},[146],{"Operator":147,"Negate":30,"CPEMatch":148},"OR",[149,151,154,156,159,162,164],{"Vulnerable":4,"Criteria":40,"MatchCriteriaID":150,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"8B33F8D8-DCA9-4AD7-A2EE-2E147C0B22BD",{"Vulnerable":4,"Criteria":152,"MatchCriteriaID":153,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"cpe:2.3:a:microsoft:host_integration_server_2000:*:sp2:*:*:server:*:*:*","3735842E-8460-47DF-80CE-07A1B5B7B2BE",{"Vulnerable":4,"Criteria":43,"MatchCriteriaID":155,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"F36B2527-D82F-4473-988D-64C2222726AA",{"Vulnerable":4,"Criteria":157,"MatchCriteriaID":158,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"cpe:2.3:a:microsoft:host_integration_server_2004:*:*:*:*:server:*:*:*","0BE2E52C-FEC4-46E4-9466-DFA925798DA1",{"Vulnerable":4,"Criteria":160,"MatchCriteriaID":161,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"cpe:2.3:a:microsoft:host_integration_server_2004:*:sp1:*:*:server:*:*:*","D9518CB8-38F4-4E11-A652-D2784CBE0F5B",{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":163,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"7F919C01-85B1-4E0D-BCEF-EDF411814436",{"Vulnerable":4,"Criteria":165,"MatchCriteriaID":166,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"cpe:2.3:a:microsoft:host_integration_server_2006:*:*:*:*:*:*:x86:*","9EE996C0-B973-4584-AA99-2A7832C5F85E",[],[],{"lastModified":11,"cacheTime":170,"version":22},1792358803572,{"score":172,"band":173,"action":174,"scoredAt":175},68,"Medium","Plan remediation","2026-10-17T06:36:07.876771+00:00"]