CVE-2006-4537: Dec Openvms Alpha

Low severity, CVSS 2.1. EPSS: 0.6% chance of exploitation in the next 30 days.

NET$SESSION_CONTROL.EXE in DECnet-Plus in OpenVMS ALPHA 7.3-2 and Alpha 8.2 writes a password to an audit log file when there is a successful connection after a "network breakin" event, which allows local users to obtain passwords by reading the file.

Affected products

• Dec Dec Openvms Alpha: version 7.3.2 only; version 8.2 only

Published 2006-09-05. Last modified 2026-06-16.