Lucene search

K
cve[email protected]CVE-2008-3946
HistorySep 05, 2008 - 4:08 p.m.

CVE-2008-3946

2008-09-0516:08:00
CWE-59
web.nvd.nist.gov
21
cve-2008-3946
finger client
hp tcp/ip services
openvms
local users
arbitrary files

6.3 Medium

AI Score

Confidence

High

4.9 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:C/I:N/A:N

0.0004 Low

EPSS

Percentile

5.2%

The finger client in HP TCP/IP Services for OpenVMS 5.x allows local users to read arbitrary files via a link corresponding to a (1) .plan or (2) .project file.

Affected configurations

NVD
Node
hpopenvmsMatch5
CPENameOperatorVersion
hp:openvmshp openvmseq5

6.3 Medium

AI Score

Confidence

High

4.9 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:C/I:N/A:N

0.0004 Low

EPSS

Percentile

5.2%

Related for CVE-2008-3946