← Database

CVE-2006-4537

LOW CVSS: 2.1 Published: 2006-09-05 Modified: 2026-06-16

Description

NET$SESSION_CONTROL.EXE in DECnet-Plus in OpenVMS ALPHA 7.3-2 and Alpha 8.2 writes a password to an audit log file when there is a successful connection after a "network breakin" event, which allows local users to obtain passwords by reading the file.

Affected Platforms

Dec Dec Openvms Alpha

Weakness Type

CWE-200

References