PT-2007-1624 · Digital Equipment · Decnet/Osi

Publicado 2007-01-09 · Atualizado 2011-03-08 · CVE-2007-0139

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions DECnet/OSI versions 7.3 through 7.3-2

Description The issue allows attackers to obtain unintended privileged access to data and system resources. It is related to the following components: (1) [SYSEXE]CTF$UI.EXE, (2) [SYSMSG]CTF$MESSAGES.EXE, (3) [SYSHLP]CTF$HELP.HLB, and (4) [SYSMGR]CTF$STARTUP.COM.

Recommendations For DECnet/OSI versions 7.3 through 7.3-2, consider restricting access to the affected components, such as [SYSEXE]CTF$UI.EXE, [SYSMSG]CTF$MESSAGES.EXE, [SYSHLP]CTF$HELP.HLB, and [SYSMGR]CTF$STARTUP.COM, to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2007-0139

Produtos afetados

Decnet/Osi

Referências · 9

• https://nvd.nist.gov/vuln/detail/CVE-2007-0139 · Nota de Segurança
• http://osvdb.org/32585 · Nota
• ftp://ftp.itrc.hp.com/openvms_patches/vax/V7.3/VAX_DNVOSIMUP01-V0703.txt · Correção
• http://osvdb.org/32583 · Nota
• http://secunia.com/advisories/23636 · Aviso do Fabricante
• http://osvdb.org/32584 · Nota
• http://osvdb.org/32586 · Nota
• http://vupen.com/english/advisories/2007/0063 · Nota
• ftp://ftp.itrc.hp.com/openvms_patches/alpha/V7.3-2/AXP_DNVOSIMUP01-V0703-2.txt · Correção