CVE-2005-0652

Technical details about CVE-2005-0652 (affected products, vulnerable components, root cause, impact) are not publicly available in the supplied documents. Monitor for updates.

CVE-2005-0652

Unknown vulnerability in HP OpenVMS VAX 7.x and 6.x and OpenVMS Alpha 7.x or 6.x allows local users to access privileged files...

[SECURITY BULLETIN] SSRT4866 rev.0 MUP HP OpenVMS V6.x and V7.x privileged file access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 HP SECURITY BULLETIN HPSBOV01121 REVISION: 0 SSRT4866 rev.0 MUP HP OpenVMS V6.x and V7.x privileged file access NOTICE: There are no restrictions for distribution of this Security Bulletin provided that it remains complete and intact. The information ...

HP OpenVMS privileged files access

No description provided...

OpenVMS WASD HTTP Server Multiple Vulnerabilities

According to its banner, the remote host appears to be running WASD HTTP server - a web server for the OpenVMS platform. The remote version of this software is affected by various vulnerabilities that may allow an attacker to execute arbitrary code on the remote host. C Tenable Network Security,...

CVE-2002-1513

The UCX POP server in HP TCP/IP services for OpenVMS 4.2 through 5.3 allows local users to truncate arbitrary files via the -logfile command line option, which overrides file system permissions because the server runs with the SYSPRV and BYPASS privileges...

CVE-2002-1513

The CVE-2002-1513 issue concerns the UCX POP server in HP TCP/IP services for OpenVMS 4.2–5.3. A local user can truncate arbitrary files through the -logfile command line option, because the server runs with SYSPRV and BYPASS privileges, which override file system permissions. NVD assigns a base ...

HP Tru64 UNIX/OpenVMS/HP-UX DCE server buffer overflow

Buffer overflow on RPC parsing...

@stake advisory: HP dced Remote Command Execution Multiple OSes

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 @stake, Inc. www.atstake.com Security Advisory Advisory Name: HP dced Remote Command Execution Release Date: 07/22/2004 Application: dced Platform: HPUX 11 HP Tru64 HP OpenVMS Severity: A remote attacker can execute arbitrary commands Authors: Jeremy...

[security bulletin] SSRT4741 rev.1 DCE for HP OpenVMS Potential RPC Buffer Overflow Attack VU#259796, VU#568148, VU#326746

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 HP SECURITY BULLETIN HPSBOV010561 REVISION: 1 TITLE: SSRT4741 Rev.1 DCE for HP OpenVMS Potential RPC Buffer Overrun Attack NOTICE: There are no restrictions for distribution of this Bulletin provided that it remains complete and intact. The informatio...

OpenVMS page management vulnerability

Overview Old versions circa 1993 of OpenVMS and OpenVMS AXP contain a vulnerability related to page management. Description There is a vulnerability related to page management in old versions circa 1993 of Open VMS. An exploit for this vulnerability, written in MACRO-32, was available at the time...

CVE-2002-1513

The UCX POP server in HP TCP/IP services for OpenVMS 4.2 through 5.3 allows local users to truncate arbitrary files via the -logfile command line option, which overrides file system permissions because the server runs with the SYSPRV and BYPASS privileges...

CVE-2002-2000

ACMS 4.3 and 4.4 in OpenVMS Alpha 7.2 and 7.3 does not properly use process privileges, which allows attackers to access data...

Cracking OpenVMS passwords with John the Ripper

I have written a patch for John the Ripper http://www.openwall.com/john/ to allow cracking OpenVMS Vax and Alpha passwords. The patch is based on code from Shawn Clifford, Davide Casale and Mario Ambrogetti. The sources are in http://jl.gailly.net/security/john-VMS-patch.tar.gz A README file is a...

OpenVMS weak passwords

Llimit character set, case insensitivity and fast encryption algorythm allow password bruteforcing...

[security bulletin] SSRT2371 HP OpenVMS Potential POP server local vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SECURITY BULLETIN REVISION: 0 Title: SSRT2371 HP OpenVMS Potential POP server local vulnerability NOTICE: There are no restrictions for distribution of this Bulletin provided that it remains complete and intact. RELEASE DATE: September 2002 SEVERITY:...

Unauthorized access in OpenVMS POP3 server

It's possible to overwrite local file by specifing it as a log file...

OpenVMS POP server local vulnerability

Akita Security Advisory 27/09/2002 OpenVMS UCX$POPSERVER.EXE vulnerability Advisory: http://www.akita-security.co.uk/VMS/ucxpopserver.txt VMS security tool http://www.akita-security.co.uk/stoat Overview ======== UCX is the main TCP/IP stack for OpenVMS. Akita Security have discovered a...

remote SYSTEM compromise in WASD OpenVMS http server

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Multiple vulnerabilities in WASD http server for OpenVMS Version 1.0, 25 Sept 2002. 0. Contents 1. Summary 2. Severity: Critical 3. Vulnerable versions 4. Description 5. Solutions 6. Examples of site weaknesses 7. Conclusion 8. Acknowledgments 9...

OpenVMS WASD multiple bugs

Weak default configuration, protection bypass, CGI execution in server's content...