OSVDB ID: 48042

Title: HP TCP/IP Services for OpenVMS Finger Client Multiple File Symlink Arbitrary File Access

Info

Disclosure

Aug 09, 2008

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

Classification

Location: Local Access Required
Attack Type: Input Manipulation
Impact: Loss of Integrity

Solution

Products

Hewlett-Packard Development Company, L.P.

HP TCP/IP Services for OpenVMS

5.6

References

CVE ID: 2008-3946 (see also: NVD)
Other Advisory URL: http://deathrow.vistech.net/DEFCON16/VMS.PDF
Vendor Specific News/Changelog Entry: http://www.openvms.org/stories.php?story=08/08/23/1556033

Credit

Christer Oberg -
Claes Nyberg -
James Tusini -

Direct URL: http://osvdb.org/36218