CVE-2008-4315
N/A
N/A
Summary
tog-pegasus in OpenGroup Pegasus 2.7.0 on Red Hat Enterprise Linux (RHEL) 5, Fedora 9, and Fedora 10 does not log failed authentication attempts to the OpenPegasus CIM server, which makes it easier for remote attackers to avoid detection of password guessing attacks.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | n/a | n/a | affected |
Weaknesses
- n/a
ADP Enrichment
CVE Program Container
Additional References
- https://bugzilla.redhat.com/show_bug.cgi?id=472017
- https://admin.fedoraproject.org/updates/tog-pegasus-2.7.0-7.fc9
- http://www.securitytracker.com/id?1021281
- http://osvdb.org/50278
- http://www.redhat.com/support/errata/RHSA-2008-1001.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9431
- https://admin.fedoraproject.org/updates/tog-pegasus-2.7.1-3.fc10
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46830
- http://secunia.com/advisories/32862
References
- https://bugzilla.redhat.com/show_bug.cgi?id=472017
- https://admin.fedoraproject.org/updates/tog-pegasus-2.7.0-7.fc9
- http://www.securitytracker.com/id?1021281
- http://osvdb.org/50278
- http://www.redhat.com/support/errata/RHSA-2008-1001.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9431
- https://admin.fedoraproject.org/updates/tog-pegasus-2.7.1-3.fc10
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46830
- http://secunia.com/advisories/32862
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.