A vulnerability has been reported in OpenVMS, which can be exploited by malicious, local users to gain escalated privileges.

The vulnerability is caused due to an unspecified boundary error in the SMGSHR.EXE binary and can be exploited to cause a stack-based buffer overflow.

The vulnerability is reported in the following products:
* OpenVMS for Integrity Servers versions 8.2-1, 8.3, and 8.3-1H1
* OpenVMS ALPHA versions 6.2, 7.3-2, 8.2, and 8.3
* OpenVMS VAX 6.2
* OpenVMS VAX 7.3

Solution
Apply update kits. Please see vendor advisories for details.
Further details available to Secunia VIM customers

Provided and/or discovered by
Reported by the vendor.

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://mail.openvms.org:8100/Lists/alerts/Message/832.html
http://mail.openvms.org:8100/Lists/alerts/Message/833.html
http://mail.openvms.org:8100/Lists/alerts/Message/834.html
http://mail.openvms.org:8100/Lists/alerts/Message/835.html
http://mail.openvms.org:8100/Lists/alerts/Message/836.html
http://mail.openvms.org:8100/Lists/alerts/Message/837.html
http://mail.openvms.org:8100/Lists/alerts/Message/845.html
http://mail.openvms.org:8100/Lists/alerts/Message/846.html
http://mail.openvms.org:8100/Lists/alerts/Message/857.html

HPSBOV02364 SSRT080078:
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01539423

Deep Links
Links available to Secunia VIM customers