CVE-2007-0139

The CVE-2007-0139 entry concerns DECnet-Plus 7.3-2 (OpenVMS ALPHA) and DECnet/OSI 7.3 (OpenVMS VAX). A vulnerability permits attackers to obtain unintended privileged access to data and system resources via unspecified vectors affecting components such as CTF$UI.EXE, CTF$MESSAGES.EXE, CTF$HELP.HL...

HP DECNet-Plus For OpenVMS未明安全绕过漏洞

HP DECNet-Plus是一款遵循七层 OSI 参考模型并支持众多的标准OSI协议。 HP DECNet-Plus For OpenVMS存在未明安全绕过，远程攻击者可以利用漏洞绕过限制访问敏感数据或系统资源。 目前没有详细漏洞细节提供。 HP DECnet-Plus for OpenVMS VAX 7.3 HP DECnet-Plus for OpenVMS ALPHA 7.3-2 可参考如下安全公告获得解决方案： ftp://ftp.itrc.hp.com/openvmspatches/alpha/V7.3-2/AXPDNVOSIMUP01-V0703-2.txt...

[SA23632] OpenVMS Audit Logfile Password Exposure

TITLE: OpenVMS Audit Logfile Password Exposure SECUNIA ADVISORY ID: SA23632 VERIFY ADVISORY: http://secunia.com/advisories/23632/ CRITICAL: Less critical IMPACT: Exposure of sensitive information WHERE: Local system OPERATING SYSTEM: OpenVMS 8.x http://secunia.com/product/6052/ DESCRIPTION: A...

OpenVMS multiple security vulnerabilities

HP DecNet-Plus undisclosured vulnerability, cleartext password in log files...

[RLSA_02-2006] OSU httpd for OpenVMS path and directory disclosure - is this a bug or a feature?

rfdslabs security advisory Title: OSU httpd for OpenVMS path and directory disclosure - is this a bug or a feature? RLSA02-2006 Versions: OSU/3.11alhpa, OSU/3.10a probably others Vendor: David Jones, Ohio State University http://www.ecr6.ohio-state.edu/www/doc/serverinfo.html Date: 18 May 2006...

CVE-2006-4537

In DECnet-Plus on OpenVMS ALPHA 7.3-2 and 8.2, the NET$SESSION_CONTROL.EXE component writes a password to an audit log file after a successful connection following a network breakin, allowing local users to read the file and obtain passwords. This is the stated vulnerability. Patches are availabl...

CVE-2006-4537

NET$SESSIONCONTROL.EXE in DECnet-Plus in OpenVMS ALPHA 7.3-2 and Alpha 8.2 writes a password to an audit log file when there is a successful connection after a "network breakin" event, which allows local users to obtain passwords by reading the file...

[SA21705] OpenVMS Session Control Password Disclosure Security Issue

---------------------------------------------------------------------- Want to work within IT-Security? Secunia is expanding its team of highly skilled security experts. We will help with relocation and obtaining a work permit. Currently the following type of positions are available:...

HP OpenVMS information leak

Under some condition user's pasword may be logged by NET$SESSIONCONTROL module...

CVE-2006-3686

Unspecified vulnerability in SYSEXESMPUTIL.EXE in HP OpenVMS 7.3-2 allows local users and "remote users" to cause a denial of service crash...

CVE-2006-3686

Technical details about CVE-2006-3686 are not publicly provided in the supplied documents. Monitor for updates from official advisories.

CVE-2006-3686

Unspecified vulnerability in SYSEXESMPUTIL.EXE in HP OpenVMS 7.3-2 allows local users and "remote users" to cause a denial of service crash...

CVE-2005-3476

Unspecified vulnerability in HP OpenVMS Integrity 8.2-1 and 8.2, and OpenVMS Alpha 7.3-2 and 8.2, allows local users to cause a denial of service...

CVE-2005-3476

Unspecified vulnerability in HP OpenVMS Integrity 8.2-1 and 8.2, and OpenVMS Alpha 7.3-2 and 8.2, allows local users to cause a denial of service...

CVE-2005-3476

The CVE-2005-3476 entry affects HP OpenVMS Integrity 8.2-1 and 8.2, and OpenVMS Alpha 7.3-2 and 8.2. It describes an unspecified vulnerability that allows local users to cause a denial of service. No concrete root-cause, affected component, or remediation details are provided in the available doc...

HP OpenVMS DoS

No description provided...

[security bulletin] SSRT051029 rev.0 - HP OpenVMS Local Denial of Service (DoS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 HP SECURITY BULLETIN HPSBOV01239 REVISION: 0 SSRT051029 rev.0 - HP OpenVMS Local Denial of Service DoS NOTICE: The information in this Security Bulletin should be acted upon as soon as possible. INITIAL RELEASE: 31 October 2005 POTENTIAL SECURITY...

CVE-2002-2000

ACMS 4.3 and 4.4 in OpenVMS Alpha 7.2 and 7.3 does not properly use process privileges, which allows attackers to access data...

CVE-2002-2000

ACMS 4.3 and 4.4 on OpenVMS Alpha 7.2 and 7.3 expose a privilege-handling flaw where the process privileges are not properly used, allowing an attacker to access data. The issue is local in scope (attackVector: LOCAL) with low base score (CVSS2: 2.1, LOW) and requires no authentication. The descr...

High Risk Vulnerability in L-Soft's LISTSERV Server

Peter Winter-Smith of NGSSoftware has discovered a number of vulnerabilities in L-Soft's LISTSERV list management system. The worst of these carries a high risk rating. Affected versions include: - LISTSERV version 14.3, including LISTSERV Lite and HPO - LISTSERV version 1.8e, including LISTSERV...