Lucene search

MitreCVE-2008-5417

HistoryDec 10, 2008 - 2:00 p.m.

CVE-2008-5417

2008-12-1014:00:01

CWE-264

mitre

web.nvd.nist.gov

decnet-plus

openvms

alpha

security vulnerability

access restrictions

local users

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

AI Score

6.4

Confidence

Low

EPSS

Percentile

5.1%

JSON

HP DECnet-Plus 8.3 before ECO03 for OpenVMS on the Alpha platform uses world-writable permissions for the OSIT$NAMES logical name table, which allows local users to bypass intended access restrictions and modify this table via the (1) SYS$CRELNM and (2) SYS$DELLNM system services.

Affected configurations

Nvd

Node

hpdecnet_plus_for_openvmsMatch8.3

AND

hpopenvmsMatch8.3

VendorProductVersionCPE
hpdecnet_plus_for_openvms8.3cpe:2.3:a:hp:decnet_plus_for_openvms:8.3:*:*:*:*:*:*:*
hpopenvms8.3cpe:2.3:a:hp:openvms:8.3:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
hp	decnet_plus_for_openvms	8.3	cpe:2.3:a:hp:decnet_plus_for_openvms:8.3:::::::*
hp	openvms	8.3	cpe:2.3:a:hp:openvms:8.3:::::::*

References

ftp://ftp.itrc.hp.com/openvms_patches/alpha/V8.3/AXP_DNVOSIECO03-V83.txt

secunia.com/advisories/33028

securitytracker.com/id?1021364

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

AI Score

6.4

Confidence

Low

EPSS

Percentile

5.1%

JSON

Related for CVE-2008-5417