Vulnerability in Hp Openvms
CVE-2012-2010
The ACMELOGIN implementation in HP OpenVMS 8.3 and 8.4 on the Alpha platform, and 8.3, 8.3-1H1, and 8.4 on the Itanium platform, when the SYS$ACM system service is enabled, allows local users to gain privileges via unspecified vectors.
EPSS: 0.004 (31.8th percentile) — read the EPSS interpretation.
Affected products
- Hp Openvms — versions 8.3, 8.3-1h1, 8.4
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- hp-security-alert@hp.com (x_refsource_HP, vendor-advisory)
- hp-security-alert@hp.com (vdb-entry, x_refsource_BID)
- hp-security-alert@hp.com (vdb-entry, x_refsource_SECTRACK)
- hp-security-alert@hp.com (x_refsource_OSVDB, vdb-entry)
- hp-security-alert@hp.com (vdb-entry, x_refsource_XF)
Frequently asked questions
- What is CVE-2012-2010?
- CVE-2012-2010 is a vulnerability in Hp Openvms, classified under CWE-264. Published 2012-05-18.
- Is CVE-2012-2010 known to be exploited?
- 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.