Lucene search

MitreCVE-2008-5120

HistoryNov 18, 2008 - 12:30 a.m.

CVE-2008-5120

2008-11-1800:30:00

CWE-119

mitre

web.nvd.nist.gov

cve-2008-5120

buffer overflow

process software multinet

finger service

hp openvms 8.3

remote code execution

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

8.1

Confidence

High

EPSS

0.7

Percentile

98.0%

JSON

Stack-based buffer overflow in the Process Software MultiNet finger service (aka FINGERD) for HP OpenVMS 8.3 allows remote attackers to execute arbitrary code via a long request string.

Affected configurations

Nvd

Node

hpopenvmsMatch8.3

VendorProductVersionCPE
hpopenvms8.3cpe:2.3:a:hp:openvms:8.3:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
hp	openvms	8.3	cpe:2.3:a:hp:openvms:8.3:::::::*

References

securityreason.com/securityalert/4602

www.securityfocus.com/archive/1/495207/100/0/threaded

www.securityfocus.com/bid/30589

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

8.1

Confidence

High

EPSS

0.7

Percentile

98.0%

JSON

Related for CVE-2008-5120