CVE Feed

    Dashboard / CVE / CVE-2008-0003

    CVE-2008-0003

    Stack-based buffer overflow in the PAMBasicAuthenticator::PAMCallback function in OpenPegasus CIM management server (tog-pegasus), when compiled to use PAM and without PEGASUS_USE_PAM_STANDALONE_PROC defined, might allow remote attackers to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2007-5360.

    Published:Jan 7, 2008
    Last Modified:Apr 23, 2026
    EPS:Jan 8, 2008
    EPSS Score:0.2951
    CVSS Score:10

    Affected Products

    Vendor
    Openpegasus
    Product
    Management Server
    Vendor
    Redhat
    Product
    Enterprise Linux
    Vendor
    Redhat
    Product
    Enterprise Linux Desktop
    Vendor
    Redhat
    Product
    Rhel Eus

    Exploits

    No exploit reference

    References

    http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01438409
    http://lists.vmware.com/pipermail/security-announce/2008/000014.html
    http://osvdb.org/40082
    http://secunia.com/advisories/28338
    http://secunia.com/advisories/28462
    http://secunia.com/advisories/29056
    http://secunia.com/advisories/29785
    http://secunia.com/advisories/29986
    http://securitytracker.com/id?1019159
    http://www.attrition.org/pipermail/vim/2008-January/001879.html
    http://www.redhat.com/support/errata/RHSA-2008-0002.html
    http://www.securityfocus.com/archive/1/490917/100/0/threaded
    http://www.securityfocus.com/bid/27172
    http://www.securityfocus.com/bid/27188
    http://www.vupen.com/english/advisories/2008/0063
    http://www.vupen.com/english/advisories/2008/0638
    http://www.vupen.com/english/advisories/2008/1234/references
    http://www.vupen.com/english/advisories/2008/1391/references
    http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4129
    https://bugzilla.redhat.com/show_bug.cgi?id=426578
    https://exchange.xforce.ibmcloud.com/vulnerabilities/39527
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10282
    https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00424.html
    https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00480.html
    http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01438409
    http://lists.vmware.com/pipermail/security-announce/2008/000014.html
    http://osvdb.org/40082
    http://secunia.com/advisories/28338
    http://secunia.com/advisories/28462
    http://secunia.com/advisories/29056
    http://secunia.com/advisories/29785
    http://secunia.com/advisories/29986
    http://securitytracker.com/id?1019159
    http://www.attrition.org/pipermail/vim/2008-January/001879.html
    http://www.redhat.com/support/errata/RHSA-2008-0002.html
    http://www.securityfocus.com/archive/1/490917/100/0/threaded
    http://www.securityfocus.com/bid/27172
    http://www.securityfocus.com/bid/27188
    http://www.vupen.com/english/advisories/2008/0063
    http://www.vupen.com/english/advisories/2008/0638
    http://www.vupen.com/english/advisories/2008/1234/references
    http://www.vupen.com/english/advisories/2008/1391/references
    http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4129
    https://bugzilla.redhat.com/show_bug.cgi?id=426578
    https://exchange.xforce.ibmcloud.com/vulnerabilities/39527
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10282
    https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00424.html
    https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00480.html

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High