PT-2012-3725 · Hewlett Packard · Openvms

Published 2012-05-18 · Updated 2017-12-05 · CVE-2012-2010

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions HP OpenVMS versions 8.3 through 8.4

Description The issue allows local users to gain privileges via unspecified vectors when the SYS$ACM system service is enabled.

Recommendations For HP OpenVMS versions 8.3 through 8.4, consider disabling the SYS$ACM system service as a temporary workaround until a patch is available.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2012-2010

Affected Products

Openvms

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2012-2010 · Security Note
• https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03333494 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/75729 · Note
• http://osvdb.org/82015 · Note
• http://securitytracker.com/id?1027074 · Note
• http://securityfocus.com/bid/53613 · Note