PT-2008-5277 · Hewlett Packard · Openvms Alpha

Published 2008-09-05 · Updated 2017-08-08 · CVE-2008-3947

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions OpenVMS Alpha version 8.3

Description A issue in DCL (aka the CLI) of OpenVMS Alpha allows local users to gain privileges via a long command line.

Recommendations For OpenVMS Alpha version 8.3, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2008-3947

Affected Products

Openvms Alpha

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2008-3947 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45047 · Note
• http://deathrow.vistech.net/DEFCON16/VMS.PDF · Note
• http://securitytracker.com/id?1020827 · Note