CVE-2008-4315 | BDVDB-2026-33592 Detail
Description#
tog-pegasus in OpenGroup Pegasus 2.7.0 on Red Hat Enterprise Linux (RHEL) 5, Fedora 9, and Fedora 10 does not log failed authentication attempts to the OpenPegasus CIM server, which makes it easier for remote attackers to avoid detection of password guessing attacks.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- https://bugzilla.redhat.com/show_bug.cgi?id=472017
- https://admin.fedoraproject.org/updates/tog-pegasus-2.7.0-7.fc9
- http://www.securitytracker.com/id?1021281
- http://osvdb.org/50278
- http://www.redhat.com/support/errata/RHSA-2008-1001.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9431
- https://admin.fedoraproject.org/updates/tog-pegasus-2.7.1-3.fc10
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46830
- http://secunia.com/advisories/32862
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.