Some vulnerabilities have been reported in OpenVMS, which can be exploited by malicious, local users and by malicious people to cause a DoS (Denial of Service).

1) A boundary error exists within the NET$CSMACD.EXE image. This can be exploited to cause a buffer overflow by issuing the "MCR MCL SHOW CSMA-CD Port * All" command.

2) An error exists within the SYS$EI1000.EXE and SYS$EI1000_MON.EXE images when handling network packets. This can be exploited to crash an affected system by sending specially crafted, overly long network packets.

NOTE: The vendor disputes the vulnerabilities.

Solution
-- OpenVMS ALPHA V8.3 --
Further details available to Secunia VIM customers

Provided and/or discovered by
Reported by the vendor.

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://mail.openvms.org:8100/Lists/alerts/Message/582.html
http://mail.openvms.org:8100/Lists/alerts/Message/583.html
http://mail.openvms.org:8100/Lists/alerts/Message/655.html
http://mail.openvms.org:8100/Lists/alerts/Message/709.html

Deep Links
Links available to Secunia VIM customers