Information Exposure Vulnerability in HP TCP/IP Services for OpenVMS
CVE-2008-3946

Currently unrated

Key Information:

Vendor
HP
Status
Openvms
Vendor
CVE Published:
5 September 2008

Summary

The finger client in HP TCP/IP Services for OpenVMS 5.x contains a vulnerability that allows local users to access sensitive information by reading arbitrary files through links to .plan or .project files. This issue exposes potentially confidential user data, raising serious security concerns.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/45135
vdb-entryx_refsource_XF
http://deathrow.vistech.net/DEFCON16/VMS.PDF
x_refsource_MISC

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.