Microsoft Host Integration Server Vulnerabilidad

Cronología

Versión

20042
20101
20001
20061

Contramedidas

Official Fix3
Temporary Fix0
Workaround0
Unavailable0
Not Defined1

Explotabilidad

High1
Functional0
Proof-of-Concept2
Unproven1
Not Defined0

Vector de acceso

Not Defined0
Physical0
Local0
Adjacent0
Network4

Autenticación

Not Defined0
High0
Low0
None4

La interacción del usuario

Not Defined0
Required1
None3

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤40
≤50
≤61
≤70
≤81
≤91
≤101

CVSSv3 Temp

≤10
≤20
≤30
≤40
≤51
≤60
≤71
≤80
≤91
≤101

VulDB

≤10
≤20
≤30
≤40
≤50
≤61
≤70
≤81
≤91
≤101

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤91
≤100

Proveedor

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤91
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Explotar día 0

<1k0
<2k0
<5k0
<10k0
<25k4
<50k0
<100k0
≥100k0

Explotar hoy

<1k3
<2k0
<5k1
<10k0
<25k0
<50k0
<100k0
≥100k0

Explotar el volumen del mercado

Affected Versions (4): 2000, 2004, 2006, 2010

Link to Product Website: https://www.microsoft.com/

Tipo de software: Database Software

Fecha de publicaciónBaseTempVulnerabilidad0dayHoyExpConCTICVE
2023-11-148.88.1Microsoft Microsoft OLE DB Provider for DB2 V7 Remote Code Execution$5k-$25k$0-$5kUnprovenOfficial Fix0.00CVE-2023-38151
2011-10-115.34.8Microsoft Host Integration Server escalada de privilegios$5k-$25k$0-$5kProof-of-ConceptOfficial Fix0.00CVE-2011-2008
2011-10-117.56.7Microsoft Host Integration Server escalada de privilegios$5k-$25k$0-$5kProof-of-ConceptOfficial Fix0.04CVE-2011-2007
2008-10-149.89.8Microsoft Host Integration Server CreateProcess autenticación débil$5k-$25k$0-$5kHighNot Defined0.00CVE-2008-3466

más entradas por Microsoft

◂ AnteriorVisión De ConjuntoPróximo ▸

Interested in the pricing of exploits?

See the underground prices here!