Red Hat Security AdvisoryRHSA-2008:1001
tog-pegasus security update
Released 2008-11-25 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) tog-pegasus-2:2.7.0-2.el5_2.1, tog-pegasus-2:2.7.0-2.el5_2.1.i386, tog-pegasus-2:2.7.0-2.el5_2.1.ia64 +5
- Red Hat Enterprise Linux Desktop (v. 5 client) tog-pegasus-2:2.7.0-2.el5_2.1, tog-pegasus-2:2.7.0-2.el5_2.1.i386, tog-pegasus-devel-2:2.7.0-2.el5_2.1 +1
Fixes 2 records
Priority LOW 35
tog-pegasus in OpenGroup Pegasus 2.7.0 on Red Hat Enterprise Linux (RHEL) 5, Fedora 9, and Fedora 10 does not log failed authentication attempts to the OpenPegasus CIM server, which makes it easier for remote attackers t…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.027 · Published 2008-11-27 · Fixed
Priority LOW 30
A certain Red Hat patch for tog-pegasus in OpenGroup Pegasus 2.7.0 does not properly configure the PAM tty name, which allows remote authenticated users to bypass intended access restrictions and send requests to OpenPeg…
CVSS 2.0MEDIUM 6.0· Network · Low privileges · Interaction — · EPSS 0.0141 · Published 2008-11-27 · Fixed CWE-264
