HP DECnet-Plus OpenVMS 'OSIT$NAMES' Security Bypass Weakness
BID:32711
Info
HP DECnet-Plus OpenVMS 'OSIT$NAMES' Security Bypass Weakness
| Bugtraq ID: | 32711 |
| Class: | Design Error |
| CVE: |
CVE-2008-5417 |
| Remote: | No |
| Local: | Yes |
| Published: | Dec 05 2008 12:00AM |
| Updated: | Dec 12 2008 04:11AM |
| Credit: | HP |
| Vulnerable: |
HP DECnet-Plus for OpenVMS VAX 7.3 HP DECnet-Plus for OpenVMS ALPHA 7.3-2 |
| Not Vulnerable: |
HP DECnet-Plus for OpenVMS 8.3 ECO03 |
Discussion
HP DECnet-Plus OpenVMS 'OSIT$NAMES' Security Bypass Weakness
HP DECnet-Plus OpenVMS is prone to a security-bypass weakness.
Attackers may be able to bypass certain security restrictions and make changes to the 'OSIT$NAMES' table without having the appropriate privileges.
Versions prior to HP DECnet-Plus OpenVMS V8.3 ECO03 are vulnerable.
HP DECnet-Plus OpenVMS is prone to a security-bypass weakness.
Attackers may be able to bypass certain security restrictions and make changes to the 'OSIT$NAMES' table without having the appropriate privileges.
Versions prior to HP DECnet-Plus OpenVMS V8.3 ECO03 are vulnerable.
Exploit / POC
HP DECnet-Plus OpenVMS 'OSIT$NAMES' Security Bypass Weakness
Attackers can exploit this issue using readily available tools.
Attackers can exploit this issue using readily available tools.
Solution / Fix
HP DECnet-Plus OpenVMS 'OSIT$NAMES' Security Bypass Weakness
Solution:
The vendor has released updates. Please see the references for details.
Solution:
The vendor has released updates. Please see the references for details.
References
HP DECnet-Plus OpenVMS 'OSIT$NAMES' Security Bypass Weakness
References:
References: