CVE-2008-4313
published 2008-11-27CVE-2008-4313: A certain Red Hat patch for tog-pegasus in OpenGroup Pegasus 2.7.0 does not properly configure the PAM tty name, which allows remote authenticated users to…
PriorityP429medium6CVSS 2.0
AVNACMAuSCPIPAP
EPSS
1.41%
69.9th percentile
A certain Red Hat patch for tog-pegasus in OpenGroup Pegasus 2.7.0 does not properly configure the PAM tty name, which allows remote authenticated users to bypass intended access restrictions and send requests to OpenPegasus WBEM services.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux_desktop | — | — |
CVSS provenance
nvdv2.06.0MEDIUMAV:N/AC:M/Au:S/C:P/I:P/A:P
vendor_redhat6.0MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
tog-pegasus: WBEM services access not restricted to dedicated user after 2.7.0 rebase
vendor_redhat·2008-08-14·CVSS 6.0
CVE-2008-4313 [MEDIUM] tog-pegasus: WBEM services access not restricted to dedicated user after 2.7.0 rebase
tog-pegasus: WBEM services access not restricted to dedicated user after 2.7.0 rebase
A certain Red Hat patch for tog-pegasus in OpenGroup Pegasus 2.7.0 does not properly configure the PAM tty name, which allows remote authenticated users to bypass intended access restrictions and send requests to OpenPegasus WBEM services.
GHSA
GHSA-98w9-9xc5-rh5r: A certain Red Hat patch for tog-pegasus in OpenGroup Pegasus 2
ghsa_unreviewed·2022-05-02
CVE-2008-4313 [MEDIUM] GHSA-98w9-9xc5-rh5r: A certain Red Hat patch for tog-pegasus in OpenGroup Pegasus 2
A certain Red Hat patch for tog-pegasus in OpenGroup Pegasus 2.7.0 does not properly configure the PAM tty name, which allows remote authenticated users to bypass intended access restrictions and send requests to OpenPegasus WBEM services.
No detection rules found.
No public exploits indexed.
http://osvdb.org/50277http://secunia.com/advisories/32862http://www.redhat.com/support/errata/RHSA-2008-1001.htmlhttp://www.securityfocus.com/bid/32460http://www.securitytracker.com/id?1021283https://admin.fedoraproject.org/updates/tog-pegasus-2.7.0-7.fc9https://admin.fedoraproject.org/updates/tog-pegasus-2.7.1-3.fc10https://bugzilla.redhat.com/show_bug.cgi?id=459217https://exchange.xforce.ibmcloud.com/vulnerabilities/46829https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9556http://osvdb.org/50277http://secunia.com/advisories/32862http://www.redhat.com/support/errata/RHSA-2008-1001.htmlhttp://www.securityfocus.com/bid/32460http://www.securitytracker.com/id?1021283https://admin.fedoraproject.org/updates/tog-pegasus-2.7.0-7.fc9https://admin.fedoraproject.org/updates/tog-pegasus-2.7.1-3.fc10https://bugzilla.redhat.com/show_bug.cgi?id=459217https://exchange.xforce.ibmcloud.com/vulnerabilities/46829https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9556
2008-11-27
Published