Published: 27/11/2008 Updated: 29/09/2017

CVSS v2 Base Score: 6 | Impact Score: 6.4 | Exploitability Score: 6.8

VMScore: 534

Vector: AV:N/AC:M/Au:S/C:P/I:P/A:P

A certain Red Hat patch for tog-pegasus in OpenGroup Pegasus 2.7.0 does not properly configure the PAM tty name, which allows remote authenticated users to bypass intended access restrictions and send requests to OpenPegasus WBEM services.

Vulnerable Product	Search on Vulmon	Subscribe to Product
redhat enterprise_linux_desktop 5.0
redhat enterprise_linux 5.0

Synopsis Important: tog-pegasus security update Type/Severity Security Advisory: Important Topic Updated tog-pegasus packages that fix security issues are now availablefor Red Hat Enterprise Linux 5This update has been rated as having important security impact by the RedHat Security Response Team ...

CWE-264 https://admin.fedoraproject.org/updates/tog-pegasus-2.7.0-7.fc9 http://www.securityfocus.com/bid/32460 http://secunia.com/advisories/32862 https://bugzilla.redhat.com/show_bug.cgi?id=459217 http://www.redhat.com/support/errata/RHSA-2008-1001.html https://admin.fedoraproject.org/updates/tog-pegasus-2.7.1-3.fc10 http://www.securitytracker.com/id?1021283 http://osvdb.org/50277 https://exchange.xforce.ibmcloud.com/vulnerabilities/46829 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9556 https://access.redhat.com/errata/RHSA-2008:1001 https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2008-4313

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect