Alert GCSA-08099 - MS08-059 Vulnerabilita' in Microsoft Host

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1



************************************************************************

      Alert ID : GCSA-08099
          Data : 15 Ottobre 2008
        Titolo : MS08-059 Vulnerabilita' in Host Integration Server RPC

************************************************************************


:: Descrizione del problema

   Questo aggiornamento di sicurezza risolve una vulnerabilita'
   relativa a Microsoft Host Integration Server.

   La vulnerabilita' consente l'esecuzione remota di codice arbitrario
   se un attaccante invia su una macchina affetta richieste RPC
   appositamente forgiate.


:: Software e Sistemi affetti

   Microsoft Host Integration Server 2000 SP2
   Microsoft Host Integration Server 2000 Administrator Client
   Microsoft Host Integration Server 2004 (Server)
   Microsoft Host Integration Server 2004 SP1 (Server)
   Microsoft Host Integration Server 2004 (Client)
   Microsoft Host Integration Server 2004 SP1 (Client)
   Microsoft Host Integration Server 2006 per sistemi 32-bit
   Microsoft Host Integration Server 2006 per sistemi x64


:: Impatto

   Esecuzione remota di codice arbritario


:: Soluzioni

   Applicare la patch segnalata nel bollettino Microsoft MS08-059
   http://www.microsoft.com/technet/security/Bulletin/MS08-059.mspx


:: Riferimenti

Microsoft Security Bulletin MS08-059
   http://www.microsoft.com/technet/security/Bulletin/MS08-059.mspx

FrSirt:
   http://www.frsirt.com/english/advisories/2008/2810

Secunia:
   http://secunia.com/advisories/32233/

SecurityFocus:
   http://www.securityfocus.com/bid/31620

CVE Mitre:
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3466



-----BEGIN PGP SIGNATURE-----

iQCVAwUBSPXz9/OB+SpikaiRAQJ+XAQAr/h99AlVp7Szw4lT8IPcDM253Ao900H8
fqlSH0thSApIsOqKnBdeQUoY3FLLwVhpBV3TXYNmKSD85vgHmVlzFG0F6toBX3TK
6xXOnnOo6LWZmZISTa4uufgx/dPK23atdEmG+BAoMRay88zxEMJFDYEa9a11M6bo
5hmgEIMzCio=
=i+lX
-----END PGP SIGNATURE-----