CVE-2008-4315: Medium severity red hat enterprise linux vulnerability
A security flaw was found in the OpenPegasus WBEM service, shipped as tog-pegasus package within the Red Hat Enterprise Linux. It was discovered, the OpenPegasus service did not log failed authentication attempts to the system log file via the traditional Pluggable Authentication Modules mechanism. An attacker could use this flaw to discover the password of the root account used for the authentication against the CIM server.
Other sources
tog-pegasus in OpenGroup Pegasus 2.7.0 on Red Hat Enterprise Linux (RHEL) 5, Fedora 9, and Fedora 10 does not log failed authentication attempts to the OpenPegasus CIM server, which makes it easier for remote attackers to avoid detection of password guessing attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-4315?
CVE-2008-4315 has been classified as a moderate severity vulnerability due to the potential for unauthorized access without proper log recording of failed authentication attempts.
How do I fix CVE-2008-4315?
To remediate CVE-2008-4315, update the affected OpenPegasus service to the patched version provided in recent Red Hat updates.
What are the affected versions related to CVE-2008-4315?
CVE-2008-4315 affects Red Hat Enterprise Linux 5.0 and Red Hat Enterprise Linux Desktop 5.0.
Is CVE-2008-4315 exploitable remotely?
CVE-2008-4315 may be exploited remotely due to its association with a service that does not properly log authentication failures.
What systems are impacted by CVE-2008-4315?
Systems running Red Hat Enterprise Linux 5.0 with the OpenPegasus WBEM service installed are impacted by CVE-2008-4315.