PT-2008-1083 · Openpegasus+1 · Openpegasus Cim Management Server+1

Mark J. Cox

·

Published

2008-01-07

·

Updated

2018-10-15

·

CVE-2008-0003

CVSS v2.0

10

High

VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions OpenPegasus CIM management server (tog-pegasus) versions 2.5.1 through 2.6.1
Description The issue is related to a stack-based buffer overflow in the PAMBasicAuthenticator::PAMCallback function, which might allow remote attackers to execute arbitrary code. This could lead to a disruption of confidentiality, integrity, and availability of protected information. The exploitation of this issue can be done remotely.
Recommendations For OpenPegasus CIM management server (tog-pegasus) version 2.5.1, consider updating to a version outside of the affected range. For OpenPegasus CIM management server (tog-pegasus) version 2.6.1, consider updating to a version outside of the affected range. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Buffer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-119

Related Identifiers

BDU:2015-07621
BDU:2015-07622
BDU:2015-07623
BDU:2015-07624
BDU:2015-07625
CVE-2008-0003
RHSA-2008:0002
RHSA-2008_0002

Affected Products

Openpegasus Cim Management Server
Red Hat