Unscored severity · published Oct 6, 2007
CVE-2007-5242
Unspecified vulnerability in (1) SYS$EI1000.EXE and (2) SYS$EI1000_MON.EXE in HP OpenVMS 8.3 and earlier allows remote attackers to cause a denial of service (machine crash) via…
–
CVSS
2.1%
EPSS
No
On KEV
Description
Unspecified vulnerability in (1) SYS$EI1000.EXE and (2) SYS$EI1000_MON.EXE in HP OpenVMS 8.3 and earlier allows remote attackers to cause a denial of service (machine crash) via an "oversize" packet, which is not properly discarded if "the device has no remaining buffers after receipt of the first buffer segment."
Exploitation
Is it being used?
Exploit prediction (EPSS)2.1% · higher than 82% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OP
Openvms · HP
through 8.3; through 8.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-5242
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-5242
Patch
http://mail.openvms.org:8100/Lists/alerts/Message/582.html
Patch
http://mail.openvms.org:8100/Lists/alerts/Message/583.html
osvdb.org
http://osvdb.org/37812
osvdb.org
http://osvdb.org/37813
Patch
http://secunia.com/advisories/27084
Patch
http://www.securityfocus.com/bid/25939
More from Openvms
7.5
CVE-2015-5477
ISC BIND Data Processing Errors Vulnerability
7.8
CVE-2017-17482
An issue was discovered in OpenVMS through V8.4-2L2 on Alpha and through V8.4-2L1 on IA64, and VAX/VMS 4.0 and later
–
CVE-2012-3277
HP OpenVMS 8.3, 8.3-1H1, and 8.4 on the Itanium platform and 7.3-2, 8.2, 8.3, and 8.4 on the Alpha platform does not properly implement the LOGIN and ACME_SERVER ACMELOGIN…
–
CVE-2012-3276
HP OpenVMS 8.3, 8.3-1H1, and 8.4 on the Itanium platform and 7.3-2, 8.2, 8.3, and 8.4 on the Alpha platform does not properly implement the LOGIN and ACME_SERVER ACMELOGIN…
–
CVE-2012-2010
The ACMELOGIN implementation in HP OpenVMS 8.3 and 8.4 on the Alpha platform, and 8.3, 8.3-1H1, and 8.4 on the Itanium platform, when the SYS$ACM system service is enabled, allows…