Vulnerability Note VU#10031

OpenVMS page management vulnerability

Overview

Old versions (circa 1993) of OpenVMS and OpenVMS AXP contain a vulnerability related to page management.

I. Description

There is a vulnerability related to page management in old versions (circa 1993) of Open VMS. An exploit for this vulnerability, written in MACRO-32, was available at the time this vulnerability was first reported. No other details are currently available. See also CERT Advisory CA-1993-05.

II. Impact

An unprivileged user on a VMS system can gain full system privileges.

III. Solution

Upgrade to a recent (post 1993) version of OpenVMS. If you are still using an old version of OpenVMS, apply a patch as decribed in CERT Advisory CA-1993-05.

Systems Affected

Vendor	Status	Date Notified	Date Updated
Hewlett-Packard Company	Vulnerable	31-May-2003

References

Credit

Thanks to Digital Equipment Corporation for reporting this vulnerability.

This document was written by Shawn V Hernan.

Other Information

Date Public:	93-03-01
Date First Published:	2003-05-31
Date Last Updated:	2004-03-23
CERT Advisory:	CA-1993-05
CVE-ID(s):	CAN-1999-1312
NVD-ID(s):	CAN-1999-1312
US-CERT Technical Alerts:
Metric:	0.43
Document Revision:	3

If you have feedback, comments, or additional information about this vulnerability, please send us email.

Get Adobe Reader