Secunia

Some vulnerabilities have been reported in OpenVMS for Integrity Servers, which can be exploited by malicious, local users to cause a DoS (Denial of Service).

1) An unspecified error when using the accelerated "glBitmap()" function on the embedded graphics hardware can be exploited to cause a system crash.

2) An error when using the "glBitmap()" function with width or height set to 0 can result in an incorrect DMA packet, which can be exploited to cause a system crash or hang.

3) An unspecified error exists within the [SYSLIB]DECW$SERVER_DIX.EXE image when calling the Kerberos API on multi CPU systems, which can be exploited to cause a crash.

The vulnerabilities are reported in OpenVMS for Integrity Servers V8.3. Vulnerabilities #1 and #2 are also reported in OpenVMS for Integrity Servers V8.2-1.

Solution
Apply update kits. See vendor advisories for details.
Further details available in Customer Area

Provided and/or discovered by
Reported by the vendor.

Changelog
Further details available in Customer Area

Original Advisory
ftp://ftp.itrc.hp.com/openvms_patches/i64/V8.3/VMS83I_GRAPHICS-V0100.txt
ftp://ftp.itrc.hp.com/openvms_patches/i64/V8.2-1/VMS821I_GRAPHICS-V0100.txt

Deep Links
Links available in Customer Area