CVE-2012-3276: Low severity openvms vulnerability

Published Dec 13, 2012

Updated

HP OpenVMS 8.3, 8.3-1H1, and 8.4 on the Itanium platform and 7.3-2, 8.2, 8.3, and 8.4 on the Alpha platform does not properly implement the LOGIN and ACMESERVER ACMELOGIN programs, which allows local users to cause a denial of service via unspecified vectors.

Affected Software

4 affected components

OpenVMS=7.3-2

OpenVMS=8.3

OpenVMS=8.3-1h1

OpenVMS=8.4

Remediation

Patch Available

https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03599086

Event History

Dec 13, 2012

CVE Published

via MITRE·11:00 AM

Data Sourced

via MITRE·11:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2012-3276?

CVE-2012-3276 is classified as a high-severity vulnerability due to its potential to cause denial of service.

How do I fix CVE-2012-3276?

To mitigate CVE-2012-3276, upgrading to the latest version of HP OpenVMS that addresses this vulnerability is recommended.

Who is affected by CVE-2012-3276?

CVE-2012-3276 affects local users of HP OpenVMS versions 7.3-2, 8.3, 8.3-1H1, and 8.4 on both Itanium and Alpha platforms.

What types of attacks can exploit CVE-2012-3276?

CVE-2012-3276 can be exploited through unspecified vectors that lead to a denial of service condition.

Is CVE-2012-3276 remote or local?

CVE-2012-3276 is a local vulnerability that requires access to the affected system to exploit.