PT-2010-3594 · Hewlett Packard · Openvms

Published 2010-07-22 · Updated 2019-10-09 · CVE-2010-1973

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:L/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions HP OpenVMS versions 7.3-2 and earlier on the ALPHA platform HP OpenVMS versions 8.2 and earlier on the ALPHA platform HP OpenVMS versions 8.3 and earlier on the ALPHA platform HP OpenVMS versions 8.2-1 and earlier on the Itanium platform HP OpenVMS versions 8.3 and earlier on the Itanium platform HP OpenVMS versions 8.3-1H1 and earlier on the Itanium platform

Description The issue affects the Auditing subsystem in HP OpenVMS, allowing local users to gain privileges or obtain sensitive information via unknown vectors.

Recommendations For HP OpenVMS versions 7.3-2 and earlier on the ALPHA platform, update to a version later than 7.3-2. For HP OpenVMS versions 8.2 and earlier on the ALPHA platform, update to a version later than 8.2. For HP OpenVMS versions 8.3 and earlier on the ALPHA platform, update to a version later than 8.3. For HP OpenVMS versions 8.2-1 and earlier on the Itanium platform, update to a version later than 8.2-1. For HP OpenVMS versions 8.3 and earlier on the Itanium platform, update to a version later than 8.3. For HP OpenVMS versions 8.3-1H1 and earlier on the Itanium platform, update to a version later than 8.3-1H1.

Fix

Related Identifiers

CVE-2010-1973

Affected Products

Openvms

References · 3

• http://marc.info/?l=bugtraq&m=127905660900687&w=2 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-1973 · Security Note
• http://securitytracker.com/id?1024190 · Note