Security Issue Reported for OpenVMS Alpha v8.3 RMS Patch Kit

On February 2, 2010 the Hewlett-Packard (HP) Software Security Response Team announced that a potential security vulnerability has been identified with certain Record Management Services (RMS) patch kits for HP OpenVMS running on ALPHA platforms.  The vulnerability could be locally exploited resulting in an escalation of privilege.

Affected Patch Kits:

VMS83A_RMS-V1000 dated September 2009

VMS83A_update-V1100 dated September 2009

The following patch kits have been made available by HP to resolve the issue:

VMS83A_RMS-V1100 - installed if either VMS83A_RMS-V1000 or VMS83A_update-V1100 are installed

VMS83A_UPDATE-V1200 - also includes the resolution

SCI Remote Managed Services Customers: Your TAM has already contacted you regarding this vulnerability.

All Others:  Patches are available for download at http://itrc.hp.com, or contact SCI for assistance in installing these patches.

Read full HP security bulletin