CVE-2007-0139 Privilege escalation in n/a

High 7.5 Published 9 Jan 2007 Updated 7 Aug 2024

Attackers can gain unintended privileged access to data and system resources in OpenVMS DECnet-Plus via unspecified vectors.

Exploited in the wild: Not known
Login needed: Not stated
Attackable: Not stated
Victim action needed: Not stated
Fix: None listed

What is CVE-2007-0139?

CVE-2007-0139 is a high-severity vulnerability in n/a, published on 9 Jan 2007.

Official description

Unspecified vulnerability in the DECnet-Plus 7.3-2 feature in DECnet/OSI 7.3-2 for OpenVMS ALPHA, and the DECnet-Plus 7.3 feature in DECnet/OSI 7.3 for OpenVMS VAX, allows attackers to obtain "unintended privileged access to data and system resources" via unspecified vectors, related to (1) [SYSEXE]CTF$UI.EXE, (2) [SYSMSG]CTF$MESSAGES.EXE, (3) [SYSHLP]CTF$HELP.HLB, and (4) [SYSMGR]CTF$STARTUP.COM.

Which versions are affected by CVE-2007-0139?

It affects 1 product.

Products include Hp Openvms.

How do I fix CVE-2007-0139?

No fix has been published for CVE-2007-0139 yet. Limit exposure of the affected software until one is available.

Is CVE-2007-0139 being exploited?

There is no known exploitation of CVE-2007-0139 in the wild and no public exploit code.

Sources

Also known as GHSA-m84r-j38v-vmgw.