ACL Editing
Beginner's Guide to VAX/VMS File Security
CERT Advisory CA-1990-07: VMS ANALYZE/PROCESS_DUMP
Vulnerability in DEC VMS versions 4.0 through 5.4. Problem with ANALYZE/PROCESS_DUMP routine.
CERT Advisory CA-1990-09: VAX/VMS Break-ins
Warning about techniques intruders were using to get access to VMS systems. No new vulnerabilities described; intruders were using weak password attacks.
CERT Advisory CA-1992-18: Revised VMS Monitor Vuln
Provides additional information concerning availability of remedial image kits to correct a vulnerability present in the Monitor utility in VMS V5.0 through V5.4-2. The vulnerability has been corrected in V5.4-3 through V5.5-1.
CERT Advisory CA-1993-05: OpenVMS and OpenVMS AXP
A vulnerability is present with Digital Equipment Corporation's OpenVMS and OpenVMS AXP. This vulnerability is present in OpenVMS V5.0 through V5.5-2 and OpenVMS AXP V1.0 but has been corrected in OpenVMS V6.0 and OpenVMS AXP V1.5. This advisory provides details from Digital on the severity of the vulnerability and patch availability for the problem.
Multinet TCP Logging
Enhancing VMS security with Multinet.
Practical Exercise In Securing OpenVMS
Research paper on VMS security procedures.
VAX/VMS Security Bulletins
Security advisories from the U.S. Department of Energy.
VMS Security Overview
High-level review of VMS security features and options.