« Volver al listado

CVE-2007-2998

Estado: ModificadaMedia (4.9)—

The Pascal run-time library (PAS$RTL.EXE) before 20070418 on OpenVMS for Integrity Servers 8.3, and PAS$RTL.EXE before 20070419 on OpenVMS Alpha 8.3, does not properly restore PC and PSL values, which allows local users to cause a denial of service (system crash) via certain Pascal code.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

HP — Openvms

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2007-2998",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.9,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:C",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 6.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2007-06-04T17:30:00.000",
  "references": [
    {
      "url": "http://mail.openvms.org:8100/Lists/alerts/Message/503.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://mail.openvms.org:8100/Lists/alerts/Message/504.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/36800",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/25486",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/24252",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2007/2001",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34635",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://mail.openvms.org:8100/Lists/alerts/Message/503.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://mail.openvms.org:8100/Lists/alerts/Message/504.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://osvdb.org/36800",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/25486",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/24252",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2007/2001",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34635",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The Pascal run-time library (PAS$RTL.EXE) before 20070418 on OpenVMS for Integrity Servers 8.3, and PAS$RTL.EXE before 20070419 on OpenVMS Alpha 8.3, does not properly restore PC and PSL values, which allows local users to cause a denial of service (system crash) via certain Pascal code."
    },
    {
      "lang": "es",
      "value": "La libreria de tiempo de ejecución de Pascal (PAS$RTL.EXE) anterior a 20070418 sobre OpenVMS  para Integrity Servers 8.3, y PAS$RTL.EXE anterior a 20070419 sobre OpenVMS Alpha 8.3, no restaura los valores PC y PSL adecuadamente, lo cual permite a usuarios locales provocar denegación de servicio (caida del sistema) a través de cierto código Pascal."
    }
  ],
  "lastModified": "2026-06-16T22:40:51.503",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:hp:openvms:8.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "80652553-3CA0-4EF3-9B84-7A141FED1DAD"
            },
            {
              "criteria": "cpe:2.3:o:hp:openvms:8.3:*:integrity_servers:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4E81101E-F282-4877-B6B8-7CD8803507DF"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}