Openvms (Hp) - vulnerabilities (CVEs)

19 CVEs, 0 in the last 30 days, 59 known versions, newest CVE from 2018-02-07. Vendor: Hp.

CVEs of Openvms

• CVE-2017-17482 - CVSS 7.8 (high), 2018-02-07: An issue was discovered in OpenVMS through V8.4-2L2 on Alpha and through V8.4-2L1 on IA64, and VAX/VMS 4.0 and later. A malformed DCL command table may result…
• CVE-2015-5477 - CVSS 7.5 (high), 2015-07-29: named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon…
• CVE-2012-3277 - CVSS 5 (medium), 2012-12-13: HP OpenVMS 8.3, 8.3-1H1, and 8.4 on the Itanium platform and 7.3-2, 8.2, 8.3, and 8.4 on the Alpha platform does not properly implement the LOGIN and…
• CVE-2012-3276 - CVSS 2.1 (low), 2012-12-13: HP OpenVMS 8.3, 8.3-1H1, and 8.4 on the Itanium platform and 7.3-2, 8.2, 8.3, and 8.4 on the Alpha platform does not properly implement the LOGIN and…
• CVE-2012-2010 - CVSS 6.9 (medium), 2012-05-18: The ACMELOGIN implementation in HP OpenVMS 8.3 and 8.4 on the Alpha platform, and 8.3, 8.3-1H1, and 8.4 on the Itanium platform, when the SYS$ACM system…
• CVE-2012-0134 - CVSS 4.9 (medium), 2012-04-19: Unspecified vulnerability in HP OpenVMS 7.3-2 on the Alpha platform, 8.3 and 8.4 on the Alpha and IA64 platforms, and 8.3-1h1 on the IA64 platform allows…
• CVE-2010-4110 - CVSS 5.7 (medium), 2010-12-22: Unspecified vulnerability in HP OpenVMS 8.3, 8.3-1H1, and 8.4 on the Itanium platform on Integrity servers allows local users to gain privileges or cause a…
• CVE-2010-1973 - CVSS 6.8 (medium), 2010-07-22: Unspecified vulnerability in the Auditing subsystem in HP OpenVMS 8.3, 8.2, 7.3-2, and earlier on the ALPHA platform, and 8.3-1H1, 8.3, 8.2-1, and earlier on…
• CVE-2010-2612 - CVSS 2.1 (low), 2010-07-02: Unspecified vulnerability in the HP OpenVMS Auditing feature in OpenVMS ALPHA 7.3-2, 8.2, and 8.3; and OpenVMS for Integrity Servers 8.3 AND 8.3-1H1; allows…
• CVE-2008-5120 - CVSS 10 (critical), 2008-11-18: Stack-based buffer overflow in the Process Software MultiNet finger service (aka FINGERD) for HP OpenVMS 8.3 allows remote attackers to execute arbitrary code…
• CVE-2008-4052 - CVSS 7.2 (high), 2008-09-11: Stack-based buffer overflow in SMGSHR.EXE in OpenVMS for Integrity Servers 8.2-1, 8.3, and 8.3-1H1 and OpenVMS ALPHA 7.3-2, 8.2, and 8.3 allows local users to…
• CVE-2008-3947 - CVSS 7.2 (high), 2008-09-05: DCL (aka the CLI) in OpenVMS Alpha 8.3 allows local users to gain privileges via a long command line.
• CVE-2008-3946 - CVSS 4.9 (medium), 2008-09-05: The finger client in HP TCP/IP Services for OpenVMS 5.x allows local users to read arbitrary files via a link corresponding to a (1) .plan or (2) .project file.
• CVE-2008-3940 - CVSS 4.4 (medium), 2008-09-05: Format string vulnerability in the finger client in HP TCP/IP Services for OpenVMS 5.x allows local users to gain privileges via format string specifiers in a…
• CVE-2007-5242 - CVSS 4.3 (medium), 2007-10-06: Unspecified vulnerability in (1) SYS$EI1000.EXE and (2) SYS$EI1000_MON.EXE in HP OpenVMS 8.3 and earlier allows remote attackers to cause a denial of service…
• CVE-2007-5241 - CVSS 5 (medium), 2007-10-06: Buffer overflow in NET$CSMACD.EXE in HP OpenVMS 8.3 and earlier allows local users to cause a denial of service (machine crash) via the "MCR MCL SHOW CSMA-CD…
• CVE-2007-3730 - CVSS 5 (medium), 2007-07-12: The default configuration of the POP server in TCP/IP Services 5.6 for HP OpenVMS 8.3 does not log the source IP address or attempted username for login…
• CVE-2007-3729 - CVSS 5 (medium), 2007-07-12: The default configuration of the POP server in TCP/IP Services 5.6 for HP OpenVMS 8.3 generates different responses depending on whether or not a username is…
• CVE-2007-2998 - CVSS 4.9 (medium), 2007-06-04: The Pascal run-time library (PAS$RTL.EXE) before 20070418 on OpenVMS for Integrity Servers 8.3, and PAS$RTL.EXE before 20070419 on OpenVMS Alpha 8.3, does not…
• CVE-2007-2468 - CVSS 4.9 (medium), 2007-05-02: Unspecified vulnerability in HP OpenVMS for Integrity Servers 8.2-1 and 8.3 allows local users to cause a denial of service (crash) via "Program actions…
• CVE-2007-0139 - CVSS 7.5 (high), 2007-01-09: Unspecified vulnerability in the DECnet-Plus 7.3-2 feature in DECnet/OSI 7.3-2 for OpenVMS ALPHA, and the DECnet-Plus 7.3 feature in DECnet/OSI 7.3 for…
• CVE-2006-3686 - CVSS 5 (medium), 2006-07-21: Unspecified vulnerability in [SYSEXE]SMPUTIL.EXE in HP OpenVMS 7.3-2 allows local users and "remote users" to cause a denial of service (crash).
• CVE-2005-0652 - CVSS 2.1 (low), 2005-05-02: Unknown vulnerability in HP OpenVMS VAX 7.x and 6.x and OpenVMS Alpha 7.x or 6.x allows local users to access privileged files.