Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The UCX POP server in HP TCP/IP services for OpenVMS 4.2 through 5.3 allows local users to truncate arbitrary files via the -logfile command line option, which overrides file system permissions because the server runs with the SYSPRV and BYPASS privileges.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
OpenVMS POP服务程序本地文件破坏漏洞
Vulnerability Description
UCX是OpenVMS系统使用的主要TCP/IP堆栈，UCX pop是使用POP协议进行通信的程序。 UCX pop服务程序对命令行选项缺少正确处理，本地攻击者可以利用这个漏洞以0字节文件覆盖系统中任意文件。 UCX pop服务程序SYS$SYSTEM:UCX$POP_SERVER.EXE默认以VMS的BYPASS和SYSPRV权限安装： INSTALL> list ucx$pop_server.exe /full DISK$OPENVMS071:<SYS0.SYSCOMMON.SYSEXE>.EXE U
CVSS Information
N/A
Vulnerability Type
N/A