Microsoft Host Integration Server 2006 Command Execution Vulnerability
14 October 2008
iDefense have published an advisory for a critical remote command execution vulnerability (CVE-2008-3466 and MS08-059) in Microsoft's Host Integration Server which was discovered by Stephen Fewer of Harmony Security. The specific versions affected are as follows:
- Microsoft Host Integration Server 2006 Enterprise Edition (both x86 & x64 based systems)
- Microsoft Host Integration Server 2006 (both x86 & x64 based systems)
- Microsoft Host Integration Server 2004 Service Pack 1, when used with:
- Microsoft Host Integration Server 2004 Enterprise Edition
- Microsoft Host Integration Server 2004 Standard Edition
- Microsoft Host Integration Server 2000 SP2, when used with:
- Microsoft Host Integration Server 2000 Standard Edition
You can read the full iDefense advisory here:
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=745
And the Microsoft advisory here:
http://www.microsoft.com/technet/security/bulletin/ms08-059.mspx
Update: SecurityFocus has a news item mentioning this vulnerability which you can read here:
http://www.securityfocus.com/brief/838
It contains a nice quote from Sheldon Malm of nCircle about the vulnerability and software in question. As quoted from the article:
"Host Integration Server is the de facto gateway linking Windows hosts to business critical mainframes and AS/400 systems, which in turn host databases and Customer Information Control System (CICS) applications that are believed to run in 90 percent of Fortune 500 corporations."
...lets hope they all patch!
Labels: Advisories
[New Tool] OllySocketTrace
21 August 2008
OllySocketTrace is a plugin for OllyDbg to trace the socket operations being performed by a process. It will record all buffers being sent and received. All parameters as well as return values are recorded and the trace is highlighted with a unique color for each socket being traced.
The socket operations currently supported are: WSASocket, WSAAccept, WSAConnect, WSARecv, WSARecvFrom, WSASend, WSASendTo, WSAAsyncSelect, WSAEventSelect, WSACloseEvent, listen, ioctlsocket, connect, bind, accept, socket, closesocket, shutdown, recv, recvfrom, send and sendto.
You can download OllySocketTrace from here:
http://www.harmonysecurity.com/OllySocketTrace.html
Labels: OllyDbg, Reverse Engineering, Tools
New Services
20 August 2008
We are soon to be offering several new services, including:
Malware Analysis
This service offers detailed malware reports and customised solutions for malware outbreaks.
Vulnerability Discovery
This service offers to discover critical vulnerabilities in your software products.
Exploit Development
This service offers the development of reliable proof of concept exploits for software vulnerabilities.
Please contact us for further information.
Labels: services
