← Vulnerability feed

Vulnerability record · CVE-2008-4052 · published 11 September 2008

CVE-2008-4052: Hp openvms memory buffer overflow vulnerability

Hp · Openvms

Stack-based buffer overflow in SMGSHR.EXE in OpenVMS for Integrity Servers 8.2-1, 8.3, and 8.3-1H1 and OpenVMS ALPHA 7.3-2, 8.2, and 8.3 allows local users to cause a denial of service (crash) or gain privileges via unspecified vectors.

7.2 CVSS 2.0 High EPSS 0.48% · top 61.1% CWE-119 · Memory buffer overflow
7.2CVSS 2.0 base score
0.48%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
18References
16 Jun 2026Last modified by NVD

Description

Stack-based buffer overflow in SMGSHR.EXE in OpenVMS for Integrity Servers 8.2-1, 8.3, and 8.3-1H1 and OpenVMS ALPHA 7.3-2, 8.2, and 8.3 allows local users to cause a denial of service (crash) or gain privileges via unspecified vectors.

AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://mail.openvms.org:8100/Lists/alerts/Message/832.html Patch
http://mail.openvms.org:8100/Lists/alerts/Message/833.html Patch
http://mail.openvms.org:8100/Lists/alerts/Message/834.html Patch
http://mail.openvms.org:8100/Lists/alerts/Message/835.html Patch
http://mail.openvms.org:8100/Lists/alerts/Message/836.html Patch
http://mail.openvms.org:8100/Lists/alerts/Message/837.html Patch
http://secunia.com/advisories/31581 Vendor Advisory
http://www.vupen.com/english/advisories/2008/2439
https://exchange.xforce.ibmcloud.com/vulnerabilities/44664
http://mail.openvms.org:8100/Lists/alerts/Message/832.html Patch
http://mail.openvms.org:8100/Lists/alerts/Message/833.html Patch
http://mail.openvms.org:8100/Lists/alerts/Message/834.html Patch
http://mail.openvms.org:8100/Lists/alerts/Message/835.html Patch
http://mail.openvms.org:8100/Lists/alerts/Message/836.html Patch
http://mail.openvms.org:8100/Lists/alerts/Message/837.html Patch
http://secunia.com/advisories/31581 Vendor Advisory
http://www.vupen.com/english/advisories/2008/2439
https://exchange.xforce.ibmcloud.com/vulnerabilities/44664

Track CVE-2008-4052 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2008-5120Hp openvms memory buffer overflow vulnerabilityStack-based buffer overflow in the Process Software MultiNet finger service (aka FINGERD) for HP OpenVMS 8.3 allows remote attackers to execute arbit…EPSS 9.9%7.8CVE-2017-17482Hp openvms memory buffer overflow vulnerabilityAn issue was discovered in OpenVMS through V8.4-2L2 on Alpha and through V8.4-2L1 on IA64, and VAX/VMS 4.0 and later. A malformed DCL command table m…EPSS 0.64%7.5CVE-2007-0139Hp openvms vulnerabilityUnspecified vulnerability in the DECnet-Plus 7.3-2 feature in DECnet/OSI 7.3-2 for OpenVMS ALPHA, and the DECnet-Plus 7.3 feature in DECnet/OSI 7.3 f…EPSS 2.2%7.2CVE-2008-3947Hp openvms improper input validation vulnerabilityDCL (aka the CLI) in OpenVMS Alpha 8.3 allows local users to gain privileges via a long command line.EPSS 0.44%6.9CVE-2012-2010Hp openvms permissions and access controls vulnerabilityThe ACMELOGIN implementation in HP OpenVMS 8.3 and 8.4 on the Alpha platform, and 8.3, 8.3-1H1, and 8.4 on the Itanium platform, when the SYS$ACM sys…EPSS 0.39%6.8CVE-2010-1973Hp openvms vulnerabilityUnspecified vulnerability in the Auditing subsystem in HP OpenVMS 8.3, 8.2, 7.3-2, and earlier on the ALPHA platform, and 8.3-1H1, 8.3, 8.2-1, and ea…EPSS 0.28%5.7CVE-2010-4110Hp openvms vulnerabilityUnspecified vulnerability in HP OpenVMS 8.3, 8.3-1H1, and 8.4 on the Itanium platform on Integrity servers allows local users to gain privileges or c…EPSS 0.28%5.0CVE-2012-3277Hp openvms vulnerabilityHP OpenVMS 8.3, 8.3-1H1, and 8.4 on the Itanium platform and 7.3-2, 8.2, 8.3, and 8.4 on the Alpha platform does not properly implement the LOGIN and…EPSS 2.4%

Source: NIST National Vulnerability Database (record CVE-2008-4052), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.