Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
An issue was discovered in OpenVMS through V8.4-2L2 on Alpha and through V8.4-2L1 on IA64, and VAX/VMS 4.0 and later. A malformed DCL command table may result in a buffer overflow allowing a local privilege escalation when a non-privileged account enters a crafted command line. This bug is exploitable on VAX and Alpha and may cause a process crash on IA64. Software was affected regardless of whether it was directly shipped by VMS Software, Inc. (VSI), HPE, HP, Compaq, or Digital Equipment Corporation.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
OpenVMS CVE-2017-17482 Ghost in the DCL shell - PoC video demo https://www.youtube.com/watch?v=WWoGP6e55Og This is the famous OpenVMS privilege escalation bug present in the CDU.exe which has CMEXEC privilege by defauly in OpenVMS and can be exploited by malformed SET COMMAND
4 of 4 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | hp | openvms | - | - | - |
| OS | hp | openvms | - | - | - |
| OS | hp | openvms | - | - | - |
| OS | hp | openvms | - | - | - |