[Info-vax] HP OpenVMS, local Denial of Service - HP Security Bulletin

[Jeff Goodwin]

<VAXman- @SendSpamHere.ORG> wrote in message 
news:00AC027B.5A0E71C4 at SendSpamHere.ORG...
> In article <xPfkr.81996$575.5342 at news.usenetserver.com>, "Jeff Goodwin" 
> <jgoodwin at maine.rrr-r.com> writes:
>>
>>
>>SET.EXE, so it looks like it's for everyone.  Probably a non-privileged
>>crash situation.
>
> According to the blurb accompanying the patch kit,
>
>  "if SET PROCESS/SCHEDULING_CLASS command is executed on the
>   node where the scheduling data base is not loaded causes
>   the system crash."

I had seen that along with the other SET.EXE fix in the MUP.  In the past, a 
MUP released for a non-privileged crash would not document the reason.  My 
thought was there was a third undocumented fix in the MUP.  The other two 
fixes just being along for the ride.

I would hope that HP would not be releasing information on how 
non-privileged users could easily crash systems.

-Jeff

>
> -- 
> VAXman- A Bored Certified VMS Kernel Mode Hacker 
> VAXman(at)TMESIS(dot)ORG
>
> Well I speak to machines with the voice of humanity.
>