PT-2008-1476 · Openpegasus · Openpegasus Cim Management Server

Published 2008-01-08 · Updated 2018-10-30 · CVE-2007-5360

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions OpenPegasus Management server versions 3.0.1 through 3.0.2

Description A buffer overflow issue exists in the OpenPegasus Management server, specifically when it is compiled to use PAM and has PEGASUS USE PAM STANDALONE PROC defined. This could potentially allow remote attackers to execute arbitrary code through vectors related to PAM authentication.

Recommendations For versions 3.0.1 and 3.0.2, consider disabling PAM authentication or restricting access to the PAM module until a patch is available. As a temporary workaround, restrict the use of the PEGASUS USE PAM STANDALONE PROC definition to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2007-5360

Affected Products

Openpegasus Cim Management Server

References · 18

• http://secunia.com/advisories/28368 · Vendor Advisory
• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01438409 · Vendor Advisory
• http://secunia.com/advisories/28358 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-5360 · Security Note
• http://novell.com/linux/security/advisories/suse_security_summary_report.html · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2007-5360 · Note
• http://securityfocus.com/archive/1/486859/100/0/threaded · Note
• http://lists.vmware.com/pipermail/security-announce/2008/000002.html · Note
• http://secunia.com/advisories/28636 · Note
• http://secunia.com/advisories/29986 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39524 · Note
• http://securityreason.com/securityalert/3538 · Note
• http://vupen.com/english/advisories/2008/0063 · Note
• http://vmware.com/security/advisories/VMSA-2008-0001.html · Note
• http://vupen.com/english/advisories/2008/0064 · Note