HP TCP/IP Services for OpenVMS SSH Unspecified Remote Unauthorized Access Vulnerability

Bugtraq ID:	28486
Class:	Access Validation Error
CVE:	CVE-2008-0214 CVE-2008-0704
Remote:	Yes
Local:	No
Published:	Mar 27 2008 12:00AM
Updated:	Jul 06 2016 02:17PM
Credit:	Hewlett-Packard
Vulnerable:	HP TCP/IP Services for OpenVMS Integrity 5.6 HP TCP/IP Services for OpenVMS Integrity 5.5 HP TCP/IP Services for OpenVMS Alpha 5.6 HP TCP/IP Services for OpenVMS Alpha 5.5 HP TCP/IP Services for OpenVMS Alpha 5.4
Not Vulnerable:

HP TCP/IP Services for OpenVMS SSH Unspecified Remote Unauthorized Access Vulnerability

HP OpenVMS SSH using TCP/IP Services for OpenVMS is prone to an unauthorized-access vulnerability.

A remote attacker can exploit this issue to gain unauthorized access to affected computers.

The following products are vulnerable:

HP OpenVMS on HP Alpha running TCP/IP Services for OpenVMS v5.4 prior to ECO 7
HP OpenVMS on HP Integrity and HP Alpha running TCP/IP Services for OpenVMS v5.5 prior to ECO 3
HP OpenVMS on HP Integrity and HP Alpha running TCP/IP Services for OpenVMS v5.6 prior to ECO 2

HP TCP/IP Services for OpenVMS SSH Unspecified Remote Unauthorized Access Vulnerability

Currently we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

HP TCP/IP Services for OpenVMS SSH Unspecified Remote Unauthorized Access Vulnerability

Solution:
The vendor has released fixes. Please see the referenced advisory for more information.

HP TCP/IP Services for OpenVMS SSH Unspecified Remote Unauthorized Access Vulnerability

References:

• OpenVMS Home Page (HP)