Back to Database
Status published
Low
CVE-2006-4537
NET$SESSION_CONTROL.EXE in DECnet-Plus in OpenVMS ALPHA 7.3-2 and Alpha 8.2...
Vulnerability Description
NET$SESSION_CONTROL.EXE in DECnet-Plus in OpenVMS ALPHA 7.3-2 and Alpha 8.2 writes a password to an audit log file when there is a successful connection after a "network breakin" event, which allows local users to obtain passwords by reading the file.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2006-4537
Credits & Attribution
No credits recorded in the NVD database.
References
- http://securitytracker.com/id?1017472
- http://www.securityfocus.com/bid/19783
- ftp://ftp.itrc.hp.com/openvms_patches/alpha/V7.3-2/AXP_DNVOSIECO03-V732.txt
- http://www.osvdb.org/28272
- http://secunia.com/advisories/21705
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28695
- http://secunia.com/advisories/23632
- http://www.vupen.com/english/advisories/2006/3423
- http://securitytracker.com/id?1016772
- ftp://ftp.itrc.hp.com/openvms_patches/alpha/V8.2/AXP_DNVOSIECO02-V82.txt
More from dec
View All →CVE-2001-0845
Vulnerability in DECwindows Motif Server on OpenVMS VAX or Alpha...
Medium
4.6
CVE-1999-1395
Vulnerability in Monitor utility (SYS$SHARE:SPISHR.EXE) in VMS 5.0 through 5.4-2...
High
7.2
CVE-1999-1315
Vulnerabilities in DECnet/OSI for OpenVMS before 5.8 on DEC Alpha...
Medium
4.6
CVE-1999-1312
Vulnerability in DEC OpenVMS VAX 5.5-2 through 5.0, and OpenVMS...
High
7.2
Affected Vendor
Affected Software
dec openvms alpha
Vulnerable Versions:
7.3.2, 8.2
Timeline
Official Publish:
September 5th, 2006
Last Modified:
August 7th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.