HP DECNet-Plus For OpenVMS未明安全绕过漏洞

HP DECNet-Plus是一款遵循七层 OSI 参考模型并支持众多的标准OSI协议。 HP DECNet-Plus For OpenVMS存在未明安全绕过，远程攻击者可以利用漏洞绕过限制访问敏感数据或系统资源。 目前没有详细漏洞细节提供。 HP DECnet-Plus for OpenVMS VAX 7.3 HP DECnet-Plus for OpenVMS ALPHA 7.3-2 可参考如下安全公告获得解决方案： ftp://ftp.itrc.hp.com/openvmspatches/alpha/V7.3-2/AXPDNVOSIMUP01-V0703-2.txt...

OpenVMS multiple security vulnerabilities

HP DecNet-Plus undisclosured vulnerability, cleartext password in log files...

CVE-2006-4537

NET$SESSIONCONTROL.EXE in DECnet-Plus in OpenVMS ALPHA 7.3-2 and Alpha 8.2 writes a password to an audit log file when there is a successful connection after a "network breakin" event, which allows local users to obtain passwords by reading the file...

CVE-2006-4537

In DECnet-Plus on OpenVMS ALPHA 7.3-2 and 8.2, the NET$SESSION_CONTROL.EXE component writes a password to an audit log file after a successful connection following a network breakin, allowing local users to read the file and obtain passwords. This is the stated vulnerability. Patches are availabl...

CVE-2006-4537

NET$SESSIONCONTROL.EXE in DECnet-Plus in OpenVMS ALPHA 7.3-2 and Alpha 8.2 writes a password to an audit log file when there is a successful connection after a "network breakin" event, which allows local users to obtain passwords by reading the file...

CVE-1999-1315

Vulnerabilities in DECnet/OSI for OpenVMS before 5.8 on DEC Alpha AXP and VAX/VMS systems allow local users to gain privileges or cause a denial of service...

CVE-1999-1315

Vulnerabilities in DECnet/OSI for OpenVMS before 5.8 on DEC Alpha AXP and VAX/VMS systems allow local users to gain privileges or cause a denial of service...