PT-2008-6534 · Hewlett Packard · Openvms+1

Publicado 2008-12-10 · Atualizado 2011-01-05 · CVE-2008-5417

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions HP DECnet-Plus version 8.3 before ECO03 for OpenVMS on the Alpha platform

Description The issue allows local users to bypass intended access restrictions and modify the OSIT$NAMES logical name table due to world-writable permissions. This can be achieved via the (1) SYS$CRELNM and (2) SYS$DELLNM system services.

Recommendations For HP DECnet-Plus version 8.3 before ECO03, update to ECO03 or later to resolve the issue. As a temporary workaround, consider restricting access to the SYS$CRELNM and SYS$DELLNM system services to minimize the risk of exploitation.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2008-5417

Produtos afetados

Hp Decnet-Plus

Openvms

Referências · 4

• ftp://ftp.itrc.hp.com/openvms_patches/alpha/V8.3/AXP_DNVOSIECO03-V83.txt · Nota
• http://securitytracker.com/id?1021364 · Nota
• http://secunia.com/advisories/33028 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2008-5417 · Nota de Segurança