Every CVESearch/Get API key

CVE-1999-1057

VMS 4.0 through 5.3 allows local users to gain privileges via the ANALYZE/PROCESS_DUMP dcl command.

4.6 Medium

CVE-1999-1057 is a medium vulnerability (CVSS 4.6) in Digital Vms, published October 25, 1990. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.37%, the 31st percentile. No source names a fixed version.

What does this mean?
Severity
4.6 MediumCVSS 2.0, NVD
Exploit chance
0.37%EPSS, 31st percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
No fix listedNo source names one

Description

VMS 4.0 through 5.3 allows local users to gain privileges via the ANALYZE/PROCESS_DUMP dcl command.

Exploit likelihood

0.37%Down 0.6 points since Feb 4, 2022
90%50%10%1%

Affected products

What each source reports

NVD Score used4.6

VMS 4.0 through 5.3 allows local users to gain privileges via the ANALYZE/PROCESS_DUMP dcl command.

Record
CVE-1999-1057
CVSS 2.0
4.6 MediumAV:L/AC:L/Au:N/C:P/I:P/A:P
Updated
2026-11-02
CVE ListNo score

VMS 4.0 through 5.3 allows local users to gain privileges via the ANALYZE/PROCESS_DUMP dcl command.

Record
CVE-1999-1057
Updated
2026-11-02
EUVDEUVD-1999-1038No score

VMS 4.0 through 5.3 allows local users to gain privileges via the ANALYZE/PROCESS_DUMP dcl command.

Record
EUVD-1999-1038
Updated
2026-11-03
GitHub AdvisoriesGHSA-q5xx-4g5h-3h6cNo score

VMS 4.0 through 5.3 allows local users to gain privileges via the ANALYZE/PROCESS_DUMP dcl command.

VMS 4.0 through 5.3 allows local users to gain privileges via the ANALYZE/PROCESS_DUMP dcl command.

Record
GHSA-q5xx-4g5h-3h6c
Updated
2026-11-02

History

History
RecordedChangedSources
facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

MoveEnter Open