Vulnerability record · CVE-2007-0139 · published 9 January 2007

CVE-2007-0139: Hp openvms vulnerability

Hp · Openvms

Unspecified vulnerability in the DECnet-Plus 7.3-2 feature in DECnet/OSI 7.3-2 for OpenVMS ALPHA, and the DECnet-Plus 7.3 feature in DECnet/OSI 7.3 for OpenVMS VAX, allows attackers to obtain "unintended privileged access to data and system resources" via unspecified vectors, related to (1) [SYSEXE]CTF$UI.EXE, (2) [SYSMSG]CTF$MESSAGES.EXE, (3) [SYSHLP]CTF$HELP.HLB, and (4) [SYSMGR]CTF$STARTUP.COM.

7.5 CVSS 2.0 High EPSS 2.2% · top 18.2%

7.5CVSS 2.0 base score

2.2%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

16References

16 Jun 2026Last modified by NVD

Description

AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Openvms Hp

References

Link	Tags
ftp://ftp.itrc.hp.com/openvms_patches/alpha/V7.3-2/AXP_DNVOSIMUP01-V0703-2.txt	Patch
ftp://ftp.itrc.hp.com/openvms_patches/vax/V7.3/VAX_DNVOSIMUP01-V0703.txt	Patch
http://osvdb.org/32583
http://osvdb.org/32584
http://osvdb.org/32585
http://osvdb.org/32586
http://secunia.com/advisories/23636	PatchVendor Advisory
http://www.vupen.com/english/advisories/2007/0063
ftp://ftp.itrc.hp.com/openvms_patches/alpha/V7.3-2/AXP_DNVOSIMUP01-V0703-2.txt	Patch
ftp://ftp.itrc.hp.com/openvms_patches/vax/V7.3/VAX_DNVOSIMUP01-V0703.txt	Patch
http://osvdb.org/32583
http://osvdb.org/32584
http://osvdb.org/32585
http://osvdb.org/32586
http://secunia.com/advisories/23636	PatchVendor Advisory
http://www.vupen.com/english/advisories/2007/0063

Track CVE-2007-0139 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2008-5120Hp openvms memory buffer overflow vulnerabilityStack-based buffer overflow in the Process Software MultiNet finger service (aka FINGERD) for HP OpenVMS 8.3 allows remote attackers to execute arbit…EPSS 9.9%18 Nov 2008 7.8CVE-2017-17482Hp openvms memory buffer overflow vulnerabilityAn issue was discovered in OpenVMS through V8.4-2L2 on Alpha and through V8.4-2L1 on IA64, and VAX/VMS 4.0 and later. A malformed DCL command table m…EPSS 0.64%7 Feb 2018 7.2CVE-2008-4052Hp openvms memory buffer overflow vulnerabilityStack-based buffer overflow in SMGSHR.EXE in OpenVMS for Integrity Servers 8.2-1, 8.3, and 8.3-1H1 and OpenVMS ALPHA 7.3-2, 8.2, and 8.3 allows local…EPSS 0.48%11 Sep 2008 7.2CVE-2008-3947Hp openvms improper input validation vulnerabilityDCL (aka the CLI) in OpenVMS Alpha 8.3 allows local users to gain privileges via a long command line.EPSS 0.44%5 Sep 2008 6.9CVE-2012-2010Hp openvms permissions and access controls vulnerabilityThe ACMELOGIN implementation in HP OpenVMS 8.3 and 8.4 on the Alpha platform, and 8.3, 8.3-1H1, and 8.4 on the Itanium platform, when the SYS$ACM sys…EPSS 0.39%18 May 2012 6.8CVE-2010-1973Hp openvms vulnerabilityUnspecified vulnerability in the Auditing subsystem in HP OpenVMS 8.3, 8.2, 7.3-2, and earlier on the ALPHA platform, and 8.3-1H1, 8.3, 8.2-1, and ea…EPSS 0.28%22 Jul 2010 5.7CVE-2010-4110Hp openvms vulnerabilityUnspecified vulnerability in HP OpenVMS 8.3, 8.3-1H1, and 8.4 on the Itanium platform on Integrity servers allows local users to gain privileges or c…EPSS 0.28%22 Dec 2010 5.0CVE-2012-3277Hp openvms vulnerabilityHP OpenVMS 8.3, 8.3-1H1, and 8.4 on the Itanium platform and 7.3-2, 8.2, 8.3, and 8.4 on the Alpha platform does not properly implement the LOGIN and…EPSS 2.4%13 Dec 2012

Source: NIST National Vulnerability Database (record CVE-2007-0139), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.