CVE-2008-5120

Description

Stack-based buffer overflow in the Process Software MultiNet finger service (aka FINGERD) for HP OpenVMS 8.3 allows remote attackers to execute arbitrary code via a long request string.

Affected products

• HP / openvms8.3 – 8.3

Exploits & proofs of concept

• exploit-dbOpenVms 8.3 Finger Service - Stack Buffer Overflowby Shaun Colley

References

• MISChttp://www.securityfocus.com/archive/1/495207/100/0/threaded
• MISChttp://securityreason.com/securityalert/4602
• MISChttp://www.securityfocus.com/bid/30589