Vulnerability Note VU#10031

OpenVMS page management vulnerability

Overview

Old versions (circa 1993) of OpenVMS and OpenVMS AXP contain a vulnerability related to page management.

I. Description

There is a vulnerability related to page management in old versions (circa 1993) of Open VMS. An exploit for this vulnerability, written in MACRO-32, was available at the time this vulnerability was first reported. No other details are currently available. See also CERT Advisory CA-1993-05.

II. Impact

An unprivileged user on a VMS system can gain full system privileges.

III. Solution

Upgrade to a recent (post 1993) version of OpenVMS. If you are still using an old version of OpenVMS, apply a patch as decribed in CERT Advisory CA-1993-05.

Systems Affected

Vendor	Status	Date Updated
Hewlett-Packard Company	Vulnerable	31-May-2003

References

Credit

Thanks to Digital Equipment Corporation for reporting this vulnerability.

This document was written by Shawn V Hernan.

Other Information

Date Public	03/01/1993
Date First Published	05/31/2003 09:25:32 PM
Date Last Updated	03/23/2004
CERT Advisory	CA-1993-05
CVE Name	CAN-1999-1312
Metric	0.43
Document Revision	3

If you have feedback, comments, or additional information about this vulnerability, please send us email.