RSS   Vulnerabilities for 'Openvms'   RSS

2012-12-13
 
CVE-2012-3276

CWE-16
 

 
HP OpenVMS 8.3, 8.3-1H1, and 8.4 on the Itanium platform and 7.3-2, 8.2, 8.3, and 8.4 on the Alpha platform does not properly implement the LOGIN and ACME_SERVER ACMELOGIN programs, which allows local users to cause a denial of service via unspecified vectors.

 
2012-05-18
 
CVE-2012-2010

CWE-264
 

 
The ACMELOGIN implementation in HP OpenVMS 8.3 and 8.4 on the Alpha platform, and 8.3, 8.3-1H1, and 8.4 on the Itanium platform, when the SYS$ACM system service is enabled, allows local users to gain privileges via unspecified vectors.

 
2012-04-19
 
CVE-2012-0134

CWE-noinfo
 

 
Unspecified vulnerability in HP OpenVMS 7.3-2 on the Alpha platform, 8.3 and 8.4 on the Alpha and IA64 platforms, and 8.3-1h1 on the IA64 platform allows local users to cause a denial of service via unknown vectors.

 
2010-12-22
 
CVE-2010-4110

CWE-noinfo
 

 
Unspecified vulnerability in HP OpenVMS 8.3, 8.3-1H1, and 8.4 on the Itanium platform on Integrity servers allows local users to gain privileges or cause a denial of service via unknown vectors.

 
2010-07-02
 
CVE-2010-2612

CWE-noinfo
 

 
Unspecified vulnerability in the HP OpenVMS Auditing feature in OpenVMS ALPHA 7.3-2, 8.2, and 8.3; and OpenVMS for Integrity Servers 8.3 AND 8.3-1H1; allows local users to obtain sensitive information via unknown vectors.

 
2010-07-22
 
CVE-2010-1973

CWE-noinfo
 

 
Unspecified vulnerability in the Auditing subsystem in HP OpenVMS 8.3, 8.2, 7.3-2, and earlier on the ALPHA platform, and 8.3-1H1, 8.3, 8.2-1, and earlier on the Itanium platform, allows local users to gain privileges or obtain sensitive information via unknown vectors.

 
2008-11-17
 
CVE-2008-5120

CWE-119
 

 
Stack-based buffer overflow in the Process Software MultiNet finger service (aka FINGERD) for HP OpenVMS 8.3 allows remote attackers to execute arbitrary code via a long request string.

 
2008-09-11
 
CVE-2008-4052

CWE-119
 

 
Stack-based buffer overflow in SMGSHR.EXE in OpenVMS for Integrity Servers 8.2-1, 8.3, and 8.3-1H1 and OpenVMS ALPHA 7.3-2, 8.2, and 8.3 allows local users to cause a denial of service (crash) or gain privileges via unspecified vectors.

 
2008-09-05
 
CVE-2008-3947

CWE-noinfo
 

 
DCL (aka the CLI) in OpenVMS Alpha 8.3 allows local users to gain privileges via a long command line.

 
 
CVE-2008-3946

CWE-noinfo
 

 
The finger client in HP TCP/IP Services for OpenVMS 5.x allows local users to read arbitrary files via a link corresponding to a (1) .plan or (2) .project file.

 


Copyright 2018, cxsecurity.com

 

Back to Top