The UCX POP server in HP TCP/IP services for OpenVMS 4.2 through 5.3 allows local users to truncate arbitrary files via the -logfile command line option, which overrides file system permissions because the server runs with the SYSPRV and BYPASS privileges.
| Software | From | Fixed in |
|---|---|---|
| compaq / tcp-ip_services | 5.0a | 5.0a.x |
| compaq / tcp-ip_services | 5.3 | 5.3.x |
| compaq / tcp-ip_services | 4.2 | 4.2.x |
| compaq / tcp-ip_services | 5.1 | 5.1.x |