HP OpenVMS RMS Patch Kit Privilege Escalation Vulnerability

Bugtraq ID:	38048
Class:	Unknown
CVE:	CVE-2010-0443
Remote:	No
Local:	Yes
Published:	Feb 02 2010 12:00AM
Updated:	Feb 02 2010 12:00AM
Credit:	The vendor disclosed this issue.
Vulnerable:	HP OpenVMS 8.3.Alpha
Not Vulnerable:

HP OpenVMS RMS Patch Kit Privilege Escalation Vulnerability

OpenVMS Record Management Services (RMS) is prone to a privilege-escalation vulnerability.

Attackers can exploit this issue to escalate their privileges and perform unauthorized actions.


The issue affects OpenVMS running on ALPHA platforms with the following RMS patch kits:

VMS83A_RMS-V1000
VMS83A_UPDATE-V1100

HP OpenVMS RMS Patch Kit Privilege Escalation Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

HP OpenVMS RMS Patch Kit Privilege Escalation Vulnerability

Solution:
Vendor fixes are available. Please see the references for more information.

HP OpenVMS RMS Patch Kit Privilege Escalation Vulnerability

References:

• OpenVMS Home Page (HP)
  
• OpenVMS Bug in Record Management Services Lets Local Users Gain Elevated Privile (HP)