CVE-2008-5417

Severity: low (CVSS 2.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-12-10 · updated 2026-06-16
Weakness: CWE-264

Description

HP DECnet-Plus 8.3 before ECO03 for OpenVMS on the Alpha platform uses world-writable permissions for the OSIT$NAMES logical name table, which allows local users to bypass intended access restrictions and modify this table via the (1) SYS$CRELNM and (2) SYS$DELLNM system services.

Affected products

HP Decnet Plus For Openvms: 8.3

References

http://secunia.com/advisories/33028
http://securitytracker.com/id?1021364
http://secunia.com/advisories/33028
http://securitytracker.com/id?1021364

Get alerted when CVE-2008-5417 or the next vulnerability affects your stack