CVE-2008-0495

Technical details about CVE-2008-0495 are not publicly available in the provided documents. Monitor for updates; current records only state an unspecified denial-of-service vulnerability in IBM HMC Pegasus CIM Server with no exposed vectors or affected versions.

OpenPegasus管理服务器PAM认证模块远程栈溢出漏洞

BUGTRAQ ID: 27188，27172 CVECAN ID: CVE-2008-0003，CVE-2007-5360 OpenPegasus是一个开源项目，用于实现DMTF CIM和WBEM企业管理标准。 OpenPegasus的PAM认证模块实现上存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制服务器。 OpenPegasus的PAM认证模块中的PAMBasicAuthenticator::PAMCallback函数存在缓冲区溢出漏洞： // // copy the user password // respi-resp = char mallocPAMMAXMSGSIZE;...

CVE-2008-0003

Stack-based buffer overflow in the PAMBasicAuthenticator::PAMCallback function in OpenPegasus CIM management server tog-pegasus, when compiled to use PAM and without PEGASUSUSEPAMSTANDALONEPROC defined, might allow remote attackers to execute arbitrary code via unknown vectors, a different...

Stack overflow

Stack-based buffer overflow in the PAMBasicAuthenticator::PAMCallback function in OpenPegasus CIM management server tog-pegasus, when compiled to use PAM and without PEGASUSUSEPAMSTANDALONEPROC defined, might allow remote attackers to execute arbitrary code via unknown vectors, a different...

CVE-2008-0003

CVE-2008-0003 records a stack-based buffer overflow in OpenPegasus tog-pegasus within PAM authentication (PAMCallback) when PAM is enabled and PEGASUS_USE_PAM_STANDALONE_PROC is not defined. The flaw could allow unauthenticated remote code execution on affected CIM management servers. Public refe...

tog-pegasus pam authentication buffer overflow

Stack-based buffer overflow in the PAMBasicAuthenticator::PAMCallback function in OpenPegasus CIM management server tog-pegasus, when compiled to use PAM and without PEGASUSUSEPAMSTANDALONEPROC defined, might allow remote attackers to execute arbitrary code via unknown vectors, a different...

Code injection

CIM Server in IBM Director 5.20.1 and earlier allows remote attackers to cause a denial of service CPU consumption, connection slot exhaustion, and daemon crash via a large number of idle connections...

CVE-2007-5612

CIM Server in IBM Director 5.20.1 and earlier allows remote attackers to cause a denial of service CPU consumption, connection slot exhaustion, and daemon crash via a large number of idle connections...

CVE-2007-5612

IBM Director CIM Server (IBM Director 5.20.1 and earlier) is affected by CVE-2007-5612. The vulnerability allows a remote, unauthenticated attacker to cause a denial of service through a flood of idle connections, leading to high CPU usage, exhaustion of connection slots, and potential daemon cra...

CVE-2007-5612

CIM Server in IBM Director 5.20.1 and earlier allows remote attackers to cause a denial of service CPU consumption, connection slot exhaustion, and daemon crash via a large number of idle connections...

IBM Director fails to properly time-out connection requests from clients

Overview IBM Director Systems, specifically CIM Server, contains a denial-of-service vulnerability that can allow a remote, unauthenticated attacker to render Director inoperative. Description IBM Director is a suite of system management tools.When a rogue connection request is made to IBM Direct...

CVE-2006-4682

Multiple unspecified vulnerabilities in IBM Director before 5.10 allow remote attackers to cause a denial of service crash via unspecified vectors involving 1 malformed WMI CIM server requests and 2 malformed packets...

CVE-2006-4682

IBM Director before 5.10 is vulnerable to remote denial of service. The issue involves malformed WMI CIM server requests and malformed packets leading to crashes. No concrete exploit details are provided in the supplied documents. The affected product is IBM Director; remediation information (e.g...

CVE-2006-4682

Multiple unspecified vulnerabilities in IBM Director before 5.10 allow remote attackers to cause a denial of service crash via unspecified vectors involving 1 malformed WMI CIM server requests and 2 malformed packets...

PhxContacts <= 0.93.1 beta Multiple SQL injection & xss

+PhxContacts +website of software:http://www.phoetux.net/ +founded by Morocco Security Team +special 10x to:all friends ww.lezr.com & www.cim-team.org +xss +http://target/login.php?m=xss +SQL +http://target/carnet.php?viewcat=&alllines=true&motclef=sql...

phpWebsite <= SQL Injection (friend.php) & (article.php)

+phpWebsite +DaBDouB-MoSiKaR Moroccan Security Team +creetz to: Moroccan security TeamDr.E-vil,Dr.Erase,H0550N,ToM-le-Magicianfrance , ameeregypt, Esp!onLeRaVaGe, CiM TeaM, xMs3D0,|ucifer,B6,al-houda membersnabil,sn!per,Kasparovand all hackers musilm morocco and www.lezr.com +special 10x to: safa...