CVE-2008-4313

A certain Red Hat patch for tog-pegasus in OpenGroup Pegasus 2.7.0 does not properly configure the PAM tty name, which allows remote authenticated users to bypass intended access restrictions and send requests to OpenPegasus WBEM services.

Link	Resource
https://admin.fedoraproject.org/updates/tog-pegasus-2.7.0-7.fc9
http://www.securityfocus.com/bid/32460
http://secunia.com/advisories/32862	Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=459217
http://www.redhat.com/support/errata/RHSA-2008-1001.html
https://admin.fedoraproject.org/updates/tog-pegasus-2.7.1-3.fc10	Patch
http://www.securitytracker.com/id?1021283
http://osvdb.org/50277
https://exchange.xforce.ibmcloud.com/vulnerabilities/46829
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9556

Configuration 1

---

Published : 2008-11-27 12:30

Updated : 2017-09-29 01:32

---

NVD link : CVE-2008-4313

Mitre link : CVE-2008-4313

No products.

CWE-264