Lucene search

K
cveMitreCVE-2008-3940
HistorySep 05, 2008 - 3:08 p.m.

CVE-2008-3940

2008-09-0515:08:00
CWE-134
mitre
web.nvd.nist.gov
28
cve-2008-3940
hp
tcp/ip services
openvms
format string vulnerability
finger client
privilege escalation

CVSS2

4.4

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

AI Score

6.5

Confidence

High

EPSS

0.001

Percentile

29.5%

Format string vulnerability in the finger client in HP TCP/IP Services for OpenVMS 5.x allows local users to gain privileges via format string specifiers in a (1) .plan or (2) .project file.

Affected configurations

Nvd
Node
hpopenvmsMatch5
VendorProductVersionCPE
hpopenvms5cpe:2.3:a:hp:openvms:5:*:*:*:*:*:*:*

CVSS2

4.4

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

AI Score

6.5

Confidence

High

EPSS

0.001

Percentile

29.5%

Related for CVE-2008-3940