CVE-2008-3940 Format string vulnerability in the finger client in HP TCP/IP Services for OpenVMS 5.x allows local users to gain privileges via format string specifiers in a (1) .plan or (2) .project file.
MediumCVSS 4.4
EPSS 0.38%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Format string vulnerability in the finger client in HP TCP/IP Services for OpenVMS 5.x allows local users to gain privileges via format string specifiers in a (1) .plan or (2) .project file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| HP Inc openvms | = 5 | No fix listed |
References
- deathrow.vistech.net
- 31587 third-party-advisory vendor-advisory
- 30948 vdb-entry
- ADV-2008-2463 vdb-entry
- hp-tcpipservices-openvms-code-execution(44752) vdb-entry