CVEvulnerability
CVE-2008-4313
6.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-11-27
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.0 MEDIUM — AV:N/AC:M/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
A certain Red Hat patch for tog-pegasus in OpenGroup Pegasus 2.7.0 does not properly configure the PAM tty name, which allows remote authenticated users to bypass intended access restrictions and send requests to OpenPegasus WBEM services.
Affected configurations
• redhat enterprise linux 5.0
• redhat enterprise linux desktop 5.0
Related
Weakness · not in database (1)
References
- http://osvdb.org/50277 osvdb.org
- http://secunia.com/advisories/32862 Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2008-1001.html www.redhat.com
- http://www.securityfocus.com/bid/32460 www.securityfocus.com
- http://www.securitytracker.com/id?1021283 www.securitytracker.com
- https://admin.fedoraproject.org/updates/tog-pegasus-2.7.0-7.fc9 admin.fedoraproject.org
- https://admin.fedoraproject.org/updates/tog-pegasus-2.7.1-3.fc10 Patch
- https://bugzilla.redhat.com/show_bug.cgi?id=459217 bugzilla.redhat.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46829 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9556 oval.cisecurity.org
- http://osvdb.org/50277 osvdb.org
- http://secunia.com/advisories/32862 Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2008-1001.html www.redhat.com
- http://www.securityfocus.com/bid/32460 www.securityfocus.com
- http://www.securitytracker.com/id?1021283 www.securitytracker.com
- https://admin.fedoraproject.org/updates/tog-pegasus-2.7.0-7.fc9 admin.fedoraproject.org
- https://admin.fedoraproject.org/updates/tog-pegasus-2.7.1-3.fc10 Patch
- https://bugzilla.redhat.com/show_bug.cgi?id=459217 bugzilla.redhat.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46829 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9556 oval.cisecurity.org