VULNERABILITY INTELLIGENCE
CVE-2008-3940
CVSS score4.4 MEDIUM
EPSS probability0.38%
CISA KEVNot currently listed
Published2008-09-05
Last modified2026-06-16
CVSS vectorAV:L/AC:M/Au:N/C:P/I:P/A:P
Description
Format string vulnerability in the finger client in HP TCP/IP Services for OpenVMS 5.x allows local users to gain privileges via format string specifiers in a (1) .plan or (2) .project file.
Weakness classification
- CWE-134: Use of Externally-Controlled Format String