Vulnerability in Hp Decnet Plus For Openvms

CVE-2008-5417

HP DECnet-Plus 8.3 before ECO03 for OpenVMS on the Alpha platform uses world-writable permissions for the OSIT$NAMES logical name table, which allows local users to bypass intended access restrictions and modify this table via the (1) SYS$CRELNM and (2) SYS$DELLNM system services.

EPSS: 0.004 (35.9th percentile) — read the EPSS interpretation.

Affected products

Hp Decnet_plus_for_openvms — versions 8.3
Hp Openvms — versions 8.3
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)