CVE:CVE-2008-3466
CNNVD:CNNVD-200810-247
Host Integration Server通过提供应用、数据和网络集成特性，将Microsoft Windows扩展至其它系统。
Host Integration Server的RPC接口所暴露的一些方式允许未经认证的攻击者在服务器上执行任意程序。RPC opcodes 1和6都允许攻击者调用CreateProcess()函数并向其传送命令行，这可能导致完全入侵服务器。
solution:Upgrade microsoft host_integration_server_2000 to a higher version than *,*:sp2,and avoid the version *:sp2; Upgrade microsoft host_integration_server_2004 to a higher version than *,*:sp1,and avoid the version *:sp1; Upgrade microsoft host_integration_server_2006 to a higher version than *