← Vulnerability feed

Vulnerability record · CVE-2008-3947 · published 5 September 2008

CVE-2008-3947: Hp openvms improper input validation vulnerability

Hp · Openvms

DCL (aka the CLI) in OpenVMS Alpha 8.3 allows local users to gain privileges via a long command line.

7.2 CVSS 2.0 High EPSS 0.44% · top 64.0% CWE-20 · Improper input validation
7.2CVSS 2.0 base score
0.44%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
6References
16 Jun 2026Last modified by NVD

Description

DCL (aka the CLI) in OpenVMS Alpha 8.3 allows local users to gain privileges via a long command line.

AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://deathrow.vistech.net/DEFCON16/VMS.PDF
http://www.securitytracker.com/id?1020827
https://exchange.xforce.ibmcloud.com/vulnerabilities/45047
http://deathrow.vistech.net/DEFCON16/VMS.PDF
http://www.securitytracker.com/id?1020827
https://exchange.xforce.ibmcloud.com/vulnerabilities/45047

Track CVE-2008-3947 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2008-5120Hp openvms memory buffer overflow vulnerabilityStack-based buffer overflow in the Process Software MultiNet finger service (aka FINGERD) for HP OpenVMS 8.3 allows remote attackers to execute arbit…EPSS 9.9%7.8CVE-2017-17482Hp openvms memory buffer overflow vulnerabilityAn issue was discovered in OpenVMS through V8.4-2L2 on Alpha and through V8.4-2L1 on IA64, and VAX/VMS 4.0 and later. A malformed DCL command table m…EPSS 0.64%7.5CVE-2007-0139Hp openvms vulnerabilityUnspecified vulnerability in the DECnet-Plus 7.3-2 feature in DECnet/OSI 7.3-2 for OpenVMS ALPHA, and the DECnet-Plus 7.3 feature in DECnet/OSI 7.3 f…EPSS 2.2%7.2CVE-2008-4052Hp openvms memory buffer overflow vulnerabilityStack-based buffer overflow in SMGSHR.EXE in OpenVMS for Integrity Servers 8.2-1, 8.3, and 8.3-1H1 and OpenVMS ALPHA 7.3-2, 8.2, and 8.3 allows local…EPSS 0.48%6.9CVE-2012-2010Hp openvms permissions and access controls vulnerabilityThe ACMELOGIN implementation in HP OpenVMS 8.3 and 8.4 on the Alpha platform, and 8.3, 8.3-1H1, and 8.4 on the Itanium platform, when the SYS$ACM sys…EPSS 0.39%6.8CVE-2010-1973Hp openvms vulnerabilityUnspecified vulnerability in the Auditing subsystem in HP OpenVMS 8.3, 8.2, 7.3-2, and earlier on the ALPHA platform, and 8.3-1H1, 8.3, 8.2-1, and ea…EPSS 0.28%5.7CVE-2010-4110Hp openvms vulnerabilityUnspecified vulnerability in HP OpenVMS 8.3, 8.3-1H1, and 8.4 on the Itanium platform on Integrity servers allows local users to gain privileges or c…EPSS 0.28%5.0CVE-2012-3277Hp openvms vulnerabilityHP OpenVMS 8.3, 8.3-1H1, and 8.4 on the Itanium platform and 7.3-2, 8.2, 8.3, and 8.4 on the Alpha platform does not properly implement the LOGIN and…EPSS 2.4%

Source: NIST National Vulnerability Database (record CVE-2008-3947), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.