CVE-2008-4052

Stack-based buffer overflow in SMGSHR.EXE in OpenVMS for Integrity Servers 8.2-1, 8.3, and 8.3-1H1 and OpenVMS ALPHA 7.3-2, 8.2, and 8.3 allows local users to cause a denial of service crash or gain privileges via unspecified vectors...

Stack overflow

Stack-based buffer overflow in SMGSHR.EXE in OpenVMS for Integrity Servers 8.2-1, 8.3, and 8.3-1H1 and OpenVMS ALPHA 7.3-2, 8.2, and 8.3 allows local users to cause a denial of service crash or gain privileges via unspecified vectors...

CVE-2008-4052

CVE-2008-4052 describes a stack-based overflow in SMGSHR.EXE on OpenVMS for Integrity Servers (8.2-1, 8.3, 8.3-1H1) and OpenVMS ALPHA (7.3-2, 8.2, 8.3). The underlying issue is a stack-based overflow in SMGSHR.EXE that allows local users to cause a denial of service (crash) or gain privileges via...

CVE-2008-4052

Stack-based buffer overflow in SMGSHR.EXE in OpenVMS for Integrity Servers 8.2-1, 8.3, and 8.3-1H1 and OpenVMS ALPHA 7.3-2, 8.2, and 8.3 allows local users to cause a denial of service crash or gain privileges via unspecified vectors...

CVE-2008-4052: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in SMGSHR.EXE in OpenVMS for Integrity Servers 8.2-1, 8.3, and 8.3-1H1 and OpenVMS ALPHA 7.3-2, 8.2, and 8.3 allows local users to cause a denial of service crash or gain privileges via unspecified vectors...

HP TCP/IP Services for OpenVMS Finger客户端格式串漏洞

BUGTRAQ ID: 30948 CNCAN ID：CNCAN-2008090303 HP OpenVMS是一款HP Integrity或AlphaServer服务器中使用的操作系统。 HP OpenVMS finger客户端存在格式串问题，远程攻击者可以利用漏洞对应用程序权限执行任意指令。 HP OpenVMS finger客户端不正确过滤输入，构建特殊的格式串作为参数数据，可导致内存破坏攻击，造成拒绝服务或者任意代码执行攻击。 HP TCP/IP Services for OpenVMS 5.3 HP TCP/IP Services for OpenVMS 5.6 HP TCP/I...

Design/Logic Flaw

The finger client in HP TCP/IP Services for OpenVMS 5.x allows local users to read arbitrary files via a link corresponding to a 1 .plan or 2 .project file...

CVE-2008-3946

The finger client in HP TCP/IP Services for OpenVMS 5.x allows local users to read arbitrary files via a link corresponding to a 1 .plan or 2 .project file...

Command injection

DCL aka the CLI in OpenVMS Alpha 8.3 allows local users to gain privileges via a long command line...

CVE-2008-3947

DCL aka the CLI in OpenVMS Alpha 8.3 allows local users to gain privileges via a long command line...

CVE-2008-3946

The CVE-2008-3946 entry affects the finger client in HP TCP/IP Services for OpenVMS 5.x. The vulnerability enables local users to read arbitrary files by requesting a link corresponding to a .plan or a .project file. This is a local, low-complexity issue with complete confidentiality impact on th...

CVE-2008-3947

DCL aka the CLI in OpenVMS Alpha 8.3 allows local users to gain privileges via a long command line...

CVE-2008-3946

The finger client in HP TCP/IP Services for OpenVMS 5.x allows local users to read arbitrary files via a link corresponding to a 1 .plan or 2 .project file...

CVE-2008-3947

CVE-2008-3947 affects OpenVMS Alpha 8.3 (DCL). Local users can gain privileges via a long command line. CVSSv2 base score 7.2 (HIGH). No remediation or exploit details are provided in the connected documents.

CVE-2008-3940

Format string vulnerability in the finger client in HP TCP/IP Services for OpenVMS 5.x allows local users to gain privileges via format string specifiers in a 1 .plan or 2 .project file...

Format string

Format string vulnerability in the finger client in HP TCP/IP Services for OpenVMS 5.x allows local users to gain privileges via format string specifiers in a 1 .plan or 2 .project file...

CVE-2008-3940

Format string vulnerability in the finger client in HP TCP/IP Services for OpenVMS 5.x allows local users to gain privileges via format string specifiers in a 1 .plan or 2 .project file...

CVE-2008-3940

CVE-2008-3940 describes a format string vulnerability in the finger client of HP TCP/IP Services for OpenVMS 5.x. Local users can gain privileges by supplying crafted content in either the ".plan" or the ".project" file, exploiting format string specifiers. The vulnerability affects the finger cl...

CVE-2008-3940: Use of Externally-Controlled Format String

Format string vulnerability in the finger client in HP TCP/IP Services for OpenVMS 5.x allows local users to gain privileges via format string specifiers in a 1 .plan or 2 .project file...

CVE-2008-3946: Improper Link Resolution Before File Access

The finger client in HP TCP/IP Services for OpenVMS 5.x allows local users to read arbitrary files via a link corresponding to a 1 .plan or 2 .project file...