NVD

Id
63170  
Name
CVE-2006-4537  
Description
NET$SESSION_CONTROL.EXE in DECnet-Plus in OpenVMS ALPHA 7.3-2 and Alpha 8.2 writes a password to an audit log file when there is a successful connection after a "network breakin" event, which allows local users to obtain passwords by reading the file.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2016-12-20  
Published
2006-09-05  
Modified Date
2011-03-07  
Seq
2006-4537  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
329001 63170 CVE-2006-4537 ftp://ftp.itrc.hp.com/openvms_patches/alpha/V7.3-2/AXP_DNVOSIECO03-V732.txt  View
329002 63170 CVE-2006-4537 ftp://ftp.itrc.hp.com/openvms_patches/alpha/V8.2/AXP_DNVOSIECO02-V82.txt  View
329003 63170 CVE-2006-4537 1016772  View
329004 63170 CVE-2006-4537 1017472  View
329005 63170 CVE-2006-4537 19783  View
329006 63170 CVE-2006-4537 ADV-2006-3423  View
329007 63170 CVE-2006-4537 openvms-auditlogfile-information-disclosure(28695)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58918 JVNDB-2006-001184 OpenVMS ALPHA の DECnet-Plus におけるパスワードを取得される脆弱性 OpenVMS ALPHA および Alpha の DECnet-Plus の NET$SESSION_CONTROL.EXE は、"ネットワーク介入" イベント後に接続成功がある際、監査ログファイルにパスワードを書き込むため、パスワードを取得される脆弱性が存在します。 CVE-2006-4537 20639 CVE-2006-4537 63170 2.1 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001184.html 2006-09-05 2012-06-26 View