PT-2007-4976 · Hewlett Packard · Openvms+1

Published 2007-07-12 · Updated 2008-11-15 · CVE-2007-3730

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions TCP/IP Services versions 5.6 for HP OpenVMS 8.3

Description The default configuration of the POP server does not log the source IP address or attempted username for login attempts. This could help remote attackers avoid identification.

Recommendations For TCP/IP Services version 5.6, consider modifying the configuration to enable logging of the source IP address and attempted username for login attempts to help identify potential security threats.

Fix

Related Identifiers

CVE-2007-3730

Affected Products

Openvms

Tcp/Ip Services

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2007-3730 · Security Note
• http://secunia.com/advisories/25882 · Vendor Advisory
• http://securityfocus.com/bid/24751 · Note
• http://osvdb.org/37810 · Note
• http://groups.google.com/group/comp.os.vms/browse_thread/thread/a5f68773805f862d/8a42e91fe1e9cd36 · Note