Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 5

Export CSV
CVE-2007-5360

tog-pegasus pam authentication buffer overflow

Buffer overflow in OpenPegasus Management server, when compiled to use PAM and with PEGASUS_USE_PAM_STANDALONE_PROC defined, as used in VMWare ESX Server 3.0.1 and 3.0.2, might allow remote attackers to execute arbitrary code via vectors related to PAM authentication, a different vulnerability than CVE-2008-0003.

CVSS 2.0 · 7.5 High EPSS 15.3% KEV · Not listed
Vendors
Openpegasus Vmware
Products
Management Server Esx
CVE-2008-0003

tog-pegasus pam authentication buffer overflow

Stack-based buffer overflow in the PAMBasicAuthenticator::PAMCallback function in OpenPegasus CIM management server (tog-pegasus), when compiled to use PAM and without PEGASUS_USE_PAM_STANDALONE_PROC defined, might allow remote attackers to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2007-5360.

CVSS 2.0 · 10.0 Critical EPSS 7.8% KEV · Not listed
Vendors
Openpegasus Redhat
Products
Management Server Enterprise Linux Enterprise Linux Desktop and 1 more
CVE-2008-4313

tog-pegasus: WBEM services access not restricted to dedicated user after 2.7.0 rebase

A certain Red Hat patch for tog-pegasus in OpenGroup Pegasus 2.7.0 does not properly configure the PAM tty name, which allows remote authenticated users to bypass intended access restrictions and send requests to OpenPegasus WBEM services.

CVSS 2.0 · 6.0 Medium EPSS 1.4% KEV · Not listed
Vendors
Openpegasus Redhat
Products
Openpegasus Wbem Enterprise Linux Enterprise Linux Desktop
CVE-2008-4315

tog-pegasus: failed authentication attempts not logged via PAM

tog-pegasus in OpenGroup Pegasus 2.7.0 on Red Hat Enterprise Linux (RHEL) 5, Fedora 9, and Fedora 10 does not log failed authentication attempts to the OpenPegasus CIM server, which makes it easier for remote attackers to avoid detection of password guessing attacks.

CVSS 2.0 · 6.8 Medium EPSS 2.7% KEV · Not listed
Vendors
Openpegasus Redhat
Products
Openpegasus Wbem Enterprise Linux Enterprise Linux Desktop