Vulnerabilities > HP > Openvms

DATE CVE VULNERABILITY TITLE RISK
2018-02-07 CVE-2017-17482 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in HP Openvms 4.0/8.42L1
An issue was discovered in OpenVMS through V8.4-2L2 on Alpha and through V8.4-2L1 on IA64, and VAX/VMS 4.0 and later.
local
low complexity
hp CWE-119
7.8
2012-12-13 CVE-2012-3277 Denial of Service vulnerability in HP OpenVMS
HP OpenVMS 8.3, 8.3-1H1, and 8.4 on the Itanium platform and 7.3-2, 8.2, 8.3, and 8.4 on the Alpha platform does not properly implement the LOGIN and ACME_SERVER ACMELOGIN programs, which allows remote attackers to cause a denial of service via unspecified vectors.
network
low complexity
hp
5.0
2012-12-13 CVE-2012-3276 Configuration vulnerability in HP Openvms
HP OpenVMS 8.3, 8.3-1H1, and 8.4 on the Itanium platform and 7.3-2, 8.2, 8.3, and 8.4 on the Alpha platform does not properly implement the LOGIN and ACME_SERVER ACMELOGIN programs, which allows local users to cause a denial of service via unspecified vectors.
local
low complexity
hp CWE-16
2.1
2012-05-18 CVE-2012-2010 Permissions, Privileges, and Access Controls vulnerability in HP Openvms 8.3/8.31H1/8.4
The ACMELOGIN implementation in HP OpenVMS 8.3 and 8.4 on the Alpha platform, and 8.3, 8.3-1H1, and 8.4 on the Itanium platform, when the SYS$ACM system service is enabled, allows local users to gain privileges via unspecified vectors.
local
hp CWE-264
6.9
2012-04-19 CVE-2012-0134 Local Denial Of Service vulnerability in HP OpenVMS
Unspecified vulnerability in HP OpenVMS 7.3-2 on the Alpha platform, 8.3 and 8.4 on the Alpha and IA64 platforms, and 8.3-1h1 on the IA64 platform allows local users to cause a denial of service via unknown vectors.
local
low complexity
hp
4.9
2011-11-26 CVE-2011-1378 Permissions, Privileges, and Access Controls vulnerability in IBM Websphere MQ 6.0
IBM WebSphere MQ 6.0 on OpenVMS, when the default rights of the MQM group are established, does not properly verify User Authorization File (UAF) data, which allows local users to kill listener processes and the command server via a control command.
local
ibm hp CWE-264
1.9
2010-12-22 CVE-2010-4110 Unspecified vulnerability in HP Openvms 8.3/8.31H1/8.4
Unspecified vulnerability in HP OpenVMS 8.3, 8.3-1H1, and 8.4 on the Itanium platform on Integrity servers allows local users to gain privileges or cause a denial of service via unknown vectors.
local
low complexity
hp
5.7
2010-07-22 CVE-2010-1973 Information Disclosure vulnerability in Openvms
Unspecified vulnerability in the Auditing subsystem in HP OpenVMS 8.3, 8.2, 7.3-2, and earlier on the ALPHA platform, and 8.3-1H1, 8.3, 8.2-1, and earlier on the Itanium platform, allows local users to gain privileges or obtain sensitive information via unknown vectors.
local
low complexity
hp
6.8
2010-07-02 CVE-2010-2612 Information Exposure vulnerability in HP Openvms and Openvms FOR Integrity Servers
Unspecified vulnerability in the HP OpenVMS Auditing feature in OpenVMS ALPHA 7.3-2, 8.2, and 8.3; and OpenVMS for Integrity Servers 8.3 AND 8.3-1H1; allows local users to obtain sensitive information via unknown vectors.
local
low complexity
hp CWE-200
2.1
2010-02-04 CVE-2010-0443 Permissions, Privileges, and Access Controls vulnerability in HP Openvms RMS Vms83Armsv1000/Vms83Aupdatev1100
Unspecified vulnerability in Record Management Services (RMS) before VMS83A_RMS-V1100 for HP OpenVMS on the Alpha platform allows local users to gain privileges via unknown vectors.
local
low complexity
hp CWE-264
6.8