cbcvebase.
CVE-2008-5120
published 2008-11-18

CVE-2008-5120: Stack-based buffer overflow in the Process Software MultiNet finger service (aka FINGERD) for HP OpenVMS 8.3 allows remote attackers to execute arbitrary code…

PriorityP356critical10CVSS 2.0
AVNACLAuNCCICAC
EXPLOIT
EPSS
9.93%
95.0th percentile
Stack-based buffer overflow in the Process Software MultiNet finger service (aka FINGERD) for HP OpenVMS 8.3 allows remote attackers to execute arbitrary code via a long request string.

Affected

1 ranges
VendorProductVersion rangeFixed in
hpopenvms——

Detection & IOCsextracted from sources · hover to see the quote

commandecho `perl -e 'print "a"x1000'` | nc -v victim.example.com 79↗
  • →Detect oversized finger protocol requests (TCP port 79) exceeding normal bounds — PoC uses a 1000-byte repeated 'a' string to trigger the stack buffer overflow in FINGERD ↗
  • →Monitor for stack-based buffer overflow exploitation attempts against the Process Software MultiNet finger service (FINGERD) on HP OpenVMS 8.3 via abnormally long request strings on TCP port 79 ↗
  • ·The finger service (fingerd) must be exposed on TCP port 79 to be exploitable; blocking or firewalling this port mitigates remote attack surface ↗
  • ·Failed exploitation attempts will likely cause denial-of-service conditions rather than code execution, so crashes of FINGERD should also be treated as potential attack indicators ↗
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.