ByteOS Network

NVD Vulnerability Details :

CVE-2006-4537

Deferred

Source-cve@mitre.org

Published At-05 Sep, 2006 | 18:04

Updated At-03 Apr, 2025 | 01:03

NET$SESSION_CONTROL.EXE in DECnet-Plus in OpenVMS ALPHA 7.3-2 and Alpha 8.2 writes a password to an audit log file when there is a successful connection after a "network breakin" event, which allows local users to obtain passwords by reading the file.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	2.1	LOW	AV:L/AC:L/Au:N/C:P/I:N/A:N

CPE Matches

dec>>dec_openvms_alpha>>7.3.2

cpe:2.3:a:dec:dec_openvms_alpha:7.3.2:*:*:*:*:*:*:*

dec>>dec_openvms_alpha>>8.2

cpe:2.3:a:dec:dec_openvms_alpha:8.2:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-200	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
ftp://ftp.itrc.hp.com/openvms_patches/alpha/V7.3-2/AXP_DNVOSIECO03-V732.txt	cve@mitre.org	N/A
ftp://ftp.itrc.hp.com/openvms_patches/alpha/V8.2/AXP_DNVOSIECO02-V82.txt	cve@mitre.org	N/A
http://secunia.com/advisories/21705	cve@mitre.org	Patch Vendor Advisory
http://secunia.com/advisories/23632	cve@mitre.org	Vendor Advisory
http://securitytracker.com/id?1016772	cve@mitre.org	N/A
http://securitytracker.com/id?1017472	cve@mitre.org	N/A
http://www.osvdb.org/28272	cve@mitre.org	N/A
http://www.securityfocus.com/bid/19783	cve@mitre.org	Patch
http://www.vupen.com/english/advisories/2006/3423	cve@mitre.org	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/28695	cve@mitre.org	N/A
ftp://ftp.itrc.hp.com/openvms_patches/alpha/V7.3-2/AXP_DNVOSIECO03-V732.txt	af854a3a-2127-422b-91ae-364da2661108	N/A
ftp://ftp.itrc.hp.com/openvms_patches/alpha/V8.2/AXP_DNVOSIECO02-V82.txt	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/21705	af854a3a-2127-422b-91ae-364da2661108	Patch Vendor Advisory
http://secunia.com/advisories/23632	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://securitytracker.com/id?1016772	af854a3a-2127-422b-91ae-364da2661108	N/A
http://securitytracker.com/id?1017472	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.osvdb.org/28272	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securityfocus.com/bid/19783	af854a3a-2127-422b-91ae-364da2661108	Patch
http://www.vupen.com/english/advisories/2006/3423	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/28695	af854a3a-2127-422b-91ae-364da2661108	N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History