33 matches found
OpenVMS fingerd remote stack overflow
sup bugtraq. Since a group of lads are giving a talk on Hacking OpenVMS at defcon I figured I'd release a vulnerability in the OpenVMS finger service part of the MultiNet package to give people a few days to figure out an exploit before the methods are documented for us by the guys giving the tal...
CVE-2007-0139
Unspecified vulnerability in the DECnet-Plus 7.3-2 feature in DECnet/OSI 7.3-2 for OpenVMS ALPHA, and the DECnet-Plus 7.3 feature in DECnet/OSI 7.3 for OpenVMS VAX, allows attackers to obtain "unintended privileged access to data and system resources" via unspecified vectors, related to 1...
CVE-2007-0139
The CVE-2007-0139 entry concerns DECnet-Plus 7.3-2 (OpenVMS ALPHA) and DECnet/OSI 7.3 (OpenVMS VAX). A vulnerability permits attackers to obtain unintended privileged access to data and system resources via unspecified vectors affecting components such as CTF$UI.EXE, CTF$MESSAGES.EXE, CTF$HELP.HL...
Cracking OpenVMS passwords with John the Ripper
I have written a patch for John the Ripper http://www.openwall.com/john/ to allow cracking OpenVMS Vax and Alpha passwords. The patch is based on code from Shawn Clifford, Davide Casale and Mario Ambrogetti. The sources are in http://jl.gailly.net/security/john-VMS-patch.tar.gz A README file is a...
CVE-1999-1325
Summary (CVE-1999-1325): SAS System 5.18 running on VAX/VMS is installed with insecure permissions on its directories and startup file, enabling local users to gain privileges. The entry is rated CVSS v2 base score 7.2 (HIGH) with local attack vector and no authentication required; impact is conf...
CVE-1999-1325
SAS System 5.18 on VAX/VMS is installed with insecure permissions for its directories and startup file, which allows local users to gain privileges...
CVE-2001-0845
Technical details about CVE-2001-0845 are not publicly available in the provided connected documents. Monitor for updates from NVD/CVE records to obtain affected products, scope, impact, and remediation.
CVE-2001-0845
Vulnerability in DECwindows Motif Server on OpenVMS VAX or Alpha 6.2 through 7.3, and SEVMS VAX or Alpha 6.2, allows local users to gain access to unauthorized resources...
CVE-1999-1315
CVE-1999-1315 affects DECnet/OSI on OpenVMS prior to 5.8 running on DEC Alpha AXP and VAX/VMS. The vulnerability allows local users to gain privileges or cause a denial of service. The connected documents confirm the affected environment but do not provide detailed root cause, specific vulnerable...
CVE-1999-1312
OpenVMS OpenVMS VAX 5.0–5.5-2 and OpenVMS AXP V1.0 contain a page-management vulnerability that can let an unprivileged user gain full system privileges. An early MACRO-32 exploit was reported; Digital/HP-era advisories recommended upgrading to newer releases (V6.0 and/or V1.5) or applying the st...
CVE-2000-0157
NetBSD ptrace call on VAX allows local users to gain privileges by modifying the PSL contents in the debugging process...
CVE-2000-0157
CVE-2000-0157 concerns NetBSD on VAX where a ptrace-based flaw lets local users gain privileges by modifying the PSL contents during debugging. The description identifies the affected vector as a local privilege escalation via the ptrace interface, but the provided documents do not specify a vend...