CVE-2008-0003
published 2008-01-08CVE-2008-0003: Stack-based buffer overflow in the PAMBasicAuthenticator::PAMCallback function in OpenPegasus CIM management server (tog-pegasus), when compiled to use PAM and…
PriorityP348critical10CVSS 2.0
AVNACLAuNCCICAC
EPSS
7.81%
94.0th percentile
Stack-based buffer overflow in the PAMBasicAuthenticator::PAMCallback function in OpenPegasus CIM management server (tog-pegasus), when compiled to use PAM and without PEGASUS_USE_PAM_STANDALONE_PROC defined, might allow remote attackers to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2007-5360.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| openpegasus | management_server | — | — |
| vmware | esx | — | — |
| vmware | esx | — | — |
CVSS provenance
nvdv2.010.0CRITICALAV:N/AC:L/Au:N/C:C/I:C/A:C
vendor_redhat7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
xen: Incomplete upstream fix for CVE-2008-4405
vendor_redhat·2008-12-18·CVSS 7.2
CVE-2008-5716 [HIGH] xen: Incomplete upstream fix for CVE-2008-4405
xen: Incomplete upstream fix for CVE-2008-4405
xend in Xen 3.3.0 does not properly restrict a guest VM's write access within the /local/domain xenstore directory tree, which allows guest OS users to cause a denial of service and possibly have unspecified other impact by writing to (1) console/tty, (2) console/limit, or (3) image/device-model-pid. NOTE: this issue exists because of erroneous set_permissions calls in the fix for CVE-2008-4405.
Statement: Not vulnerable. This issue did not affect the versions of Xen as shipped with Red Hat Enterprise Linux 5. Security update released to address CVE-2008-4405 - RHSA-2009:0003 - contained correct patch which did not introduce this problem and resolved the original issue.
Red Hat
tog-pegasus pam authentication buffer overflow
vendor_redhat·2008-01-08·CVSS 7.5
CVE-2007-5360 [HIGH] tog-pegasus pam authentication buffer overflow
tog-pegasus pam authentication buffer overflow
Buffer overflow in OpenPegasus Management server, when compiled to use PAM and with PEGASUS_USE_PAM_STANDALONE_PROC defined, as used in VMWare ESX Server 3.0.1 and 3.0.2, might allow remote attackers to execute arbitrary code via vectors related to PAM authentication, a different vulnerability than CVE-2008-0003.
Statement: Not vulnerable. This issue did not affect versions of tog-pegasus as shipped with Red Hat Enterprise Linux 4, or 5. For more details see https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2007-5360
Red Hat
tog-pegasus pam authentication buffer overflow
vendor_redhat·2008-01-07·CVSS 7.5
CVE-2008-0003 [HIGH] CWE-121 tog-pegasus pam authentication buffer overflow
tog-pegasus pam authentication buffer overflow
Stack-based buffer overflow in the PAMBasicAuthenticator::PAMCallback function in OpenPegasus CIM management server (tog-pegasus), when compiled to use PAM and without PEGASUS_USE_PAM_STANDALONE_PROC defined, might allow remote attackers to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2007-5360.
Mitigation: The tog-pegasus package is not installed by default on Red Hat Enterprise Linux.
tog-pegasus supplied by Red Hat binds only to one port (as plain http is
disabled), port 5989. The default firewall installed by Red Hat Enterprise
Linux will block remote access to this port. In normal use it's unlikely you'd
want to have this port accessible outside of an intranet anyway, and it's likely
to be blocked by en
GHSA
GHSA-79mv-qv9r-5fvw: Buffer overflow in OpenPegasus Management server, when compiled to use PAM and with PEGASUS_USE_PAM_STANDALONE_PROC defined, as used in VMWare ESX Ser
ghsa_unreviewed·2022-05-01·CVSS 10.0
CVE-2007-5360 [CRITICAL] CWE-119 GHSA-79mv-qv9r-5fvw: Buffer overflow in OpenPegasus Management server, when compiled to use PAM and with PEGASUS_USE_PAM_STANDALONE_PROC defined, as used in VMWare ESX Ser
Buffer overflow in OpenPegasus Management server, when compiled to use PAM and with PEGASUS_USE_PAM_STANDALONE_PROC defined, as used in VMWare ESX Server 3.0.1 and 3.0.2, might allow remote attackers to execute arbitrary code via vectors related to PAM authentication, a different vulnerability than CVE-2008-0003.
GHSA
GHSA-9px5-84gc-9hrq: Stack-based buffer overflow in the PAMBasicAuthenticator::PAMCallback function in OpenPegasus CIM management server (tog-pegasus), when compiled to us
ghsa_unreviewed·2022-05-01·CVSS 7.5
CVE-2008-0003 [HIGH] CWE-119 GHSA-9px5-84gc-9hrq: Stack-based buffer overflow in the PAMBasicAuthenticator::PAMCallback function in OpenPegasus CIM management server (tog-pegasus), when compiled to us
Stack-based buffer overflow in the PAMBasicAuthenticator::PAMCallback function in OpenPegasus CIM management server (tog-pegasus), when compiled to use PAM and without PEGASUS_USE_PAM_STANDALONE_PROC defined, might allow remote attackers to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2007-5360.
No detection rules found.
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01438409http://lists.vmware.com/pipermail/security-announce/2008/000014.htmlhttp://osvdb.org/40082http://secunia.com/advisories/28338http://secunia.com/advisories/28462http://secunia.com/advisories/29056http://secunia.com/advisories/29785http://secunia.com/advisories/29986http://securitytracker.com/id?1019159http://www.attrition.org/pipermail/vim/2008-January/001879.htmlhttp://www.redhat.com/support/errata/RHSA-2008-0002.htmlhttp://www.securityfocus.com/archive/1/490917/100/0/threadedhttp://www.securityfocus.com/bid/27172http://www.securityfocus.com/bid/27188http://www.vupen.com/english/advisories/2008/0063http://www.vupen.com/english/advisories/2008/0638http://www.vupen.com/english/advisories/2008/1234/referenceshttp://www.vupen.com/english/advisories/2008/1391/referenceshttp://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4129https://bugzilla.redhat.com/show_bug.cgi?id=426578https://exchange.xforce.ibmcloud.com/vulnerabilities/39527https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10282https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00424.htmlhttps://www.redhat.com/archives/fedora-package-announce/2008-January/msg00480.htmlhttp://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01438409http://lists.vmware.com/pipermail/security-announce/2008/000014.htmlhttp://osvdb.org/40082http://secunia.com/advisories/28338http://secunia.com/advisories/28462http://secunia.com/advisories/29056http://secunia.com/advisories/29785http://secunia.com/advisories/29986http://securitytracker.com/id?1019159http://www.attrition.org/pipermail/vim/2008-January/001879.htmlhttp://www.redhat.com/support/errata/RHSA-2008-0002.htmlhttp://www.securityfocus.com/archive/1/490917/100/0/threadedhttp://www.securityfocus.com/bid/27172http://www.securityfocus.com/bid/27188http://www.vupen.com/english/advisories/2008/0063http://www.vupen.com/english/advisories/2008/0638http://www.vupen.com/english/advisories/2008/1234/referenceshttp://www.vupen.com/english/advisories/2008/1391/referenceshttp://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4129https://bugzilla.redhat.com/show_bug.cgi?id=426578https://exchange.xforce.ibmcloud.com/vulnerabilities/39527https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10282https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00424.htmlhttps://www.redhat.com/archives/fedora-package-announce/2008-January/msg00480.html
2008-01-08
Published