CVE-2008-4313
First published: Fri Aug 15 2008(Updated: )
A certain Red Hat patch for tog-pegasus in OpenGroup Pegasus 2.7.0 does not properly configure the PAM tty name, which allows remote authenticated users to bypass intended access restrictions and send requests to OpenPegasus WBEM services.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Red Hat Enterprise Linux | =5.0 | |
| Red Hat Enterprise Linux Desktop | =5.0 | |
| OpenPegasus | =2.7.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://admin.fedoraproject.org/updates/tog-pegasus-2.7.0-7.fc9
- http://www.securityfocus.com/bid/32460
- http://secunia.com/advisories/32862
- https://bugzilla.redhat.com/show_bug.cgi?id=459217
- http://www.redhat.com/support/errata/RHSA-2008-1001.html
- https://admin.fedoraproject.org/updates/tog-pegasus-2.7.1-3.fc10
- http://www.securitytracker.com/id?1021283
- http://osvdb.org/50277
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46829
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9556
Frequently Asked Questions
What is the severity of CVE-2008-4313?
CVE-2008-4313 is classified as a medium severity vulnerability due to its potential to allow remote authenticated users to bypass access restrictions.
How do I fix CVE-2008-4313?
To remediate CVE-2008-4313, apply the latest patches provided by Red Hat for the affected versions of OpenPegasus.
Which systems are affected by CVE-2008-4313?
CVE-2008-4313 affects Red Hat Enterprise Linux version 5.0 and Red Hat Enterprise Linux Desktop version 5.0.
What is the impact of exploiting CVE-2008-4313?
Exploiting CVE-2008-4313 may allow remote authenticated users to send unauthorized requests to OpenPegasus WBEM services.
Is CVE-2008-4313 still relevant today?
While CVE-2008-4313 relates to older software versions, organizations using legacy systems should be aware of it to mitigate potential risks.
- collector/nvd-historical
- agent/type
- agent/references
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/severity
- agent/weakness
- agent/remedy
- agent/author
- agent/description
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2008-4313
- agent/event
- agent/trending
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/redhat
- canonical/red hat enterprise linux
- version/red hat enterprise linux/5.0
- canonical/red hat enterprise linux desktop
- version/red hat enterprise linux desktop/5.0
- vendor/openpegasus
- canonical/openpegasus
- version/openpegasus/2.7.0