tog-pegasus: failed authentication attempts not logged via PAM

tog-pegasus in OpenGroup Pegasus 2.7.0 on Red Hat Enterprise Linux RHEL 5, Fedora 9, and Fedora 10 does not log failed authentication attempts to the OpenPegasus CIM server, which makes it easier for remote attackers to avoid detection of password guessing attacks...

Important: Red Hat Security Advisory: tog-pegasus security update

Updated tog-pegasus packages that fix security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The tog-pegasus packages provide OpenPegasus Web-Based Enterprise Management WBEM services...

RHEL 5 : tog-pegasus (RHSA-2008:1001)

Updated tog-pegasus packages that fix security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The tog-pegasus packages provide OpenPegasus Web-Based Enterprise Management WBEM services...

Moderate Updated Service Console packages pcre, net-snmp, and OpenPegasus

a. Updated pcre Service Console package addresses several security issuesThe pcre package contains the Perl-Compatible Regular Expression library. pcre is used by various Service Console utilities. Several security issues were discovered in the way PCRE handles regular expressions. If an...

VMSA-2008-0007:MEDIUM Updated Service Console packages pcre, net-snmp, and OpenPegasus

VMSA-2008-0007.2 Moderate Updated Service Console packages pcre, net-snmp, and OpenPegasus VMware Security Advisory VMware Security AdvisoryAdvisory ID: VMSA-2008-0007.2 VMware Security AdvisorySynopsis: Moderate Updated Service Console packages pcre, net-snmp, and OpenPegasus VMware Security...

CentOS 4 / 5 : tog-pegasus (CESA-2008:0002)

Updated tog-pegasus packages that fix a security issue are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. The tog-pegasus packages provide OpenPegasus Web-Based Enterprise Management WBEM...

[SECURITY] Fedora 8 Update: tog-pegasus-2.6.1-3.fc8

OpenPegasus WBEM Services for Linux enables management solutions that deliv er increased control of enterprise resources. WBEM is a platform and resource independent DMTF standard that defines a common information model and communication protocol for monitoring and controlling resources from...

[SECURITY] Fedora 7 Update: tog-pegasus-2.6.0-3.fc7

OpenPegasus WBEM Services for Linux enables management solutions that deliv er increased control of enterprise resources. WBEM is a platform and resource independent DMTF standard that defines a common information model and communication protocol for monitoring and controlling resources from...

OpenPegasus管理服务器PAM认证模块远程栈溢出漏洞

BUGTRAQ ID: 27188，27172 CVECAN ID: CVE-2008-0003，CVE-2007-5360 OpenPegasus是一个开源项目，用于实现DMTF CIM和WBEM企业管理标准。 OpenPegasus的PAM认证模块实现上存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制服务器。 OpenPegasus的PAM认证模块中的PAMBasicAuthenticator::PAMCallback函数存在缓冲区溢出漏洞： // // copy the user password // respi-resp = char mallocPAMMAXMSGSIZE;...

DSquare Exploit Pack: D2SEC_VMPEGASUS

Name| d2secvmpegasus ---|--- CVE| CVE-2007-5360 Exploit Pack| D2ExploitPack Description| VMware ESX Server OpenPegasus overflow Notes|...

DSquare Exploit Pack: D2SEC_VMWARE_PEGASUS

Name| d2secvmwarepegasus ---|--- CVE| CVE-2007-5360 Exploit Pack| D2ExploitPack Description| VMware ESX Server OpenPegasus overflow Notes|...

CVE-2008-0003

Stack-based buffer overflow in the PAMBasicAuthenticator::PAMCallback function in OpenPegasus CIM management server tog-pegasus, when compiled to use PAM and without PEGASUSUSEPAMSTANDALONEPROC defined, might allow remote attackers to execute arbitrary code via unknown vectors, a different...

CVE-2007-5360

Buffer overflow in OpenPegasus Management server, when compiled to use PAM and with PEGASUSUSEPAMSTANDALONEPROC defined, as used in VMWare ESX Server 3.0.1 and 3.0.2, might allow remote attackers to execute arbitrary code via vectors related to PAM authentication, a different vulnerability than...

Buffer overflow

Buffer overflow in OpenPegasus Management server, when compiled to use PAM and with PEGASUSUSEPAMSTANDALONEPROC defined, as used in VMWare ESX Server 3.0.1 and 3.0.2, might allow remote attackers to execute arbitrary code via vectors related to PAM authentication, a different vulnerability than...

Stack overflow

Stack-based buffer overflow in the PAMBasicAuthenticator::PAMCallback function in OpenPegasus CIM management server tog-pegasus, when compiled to use PAM and without PEGASUSUSEPAMSTANDALONEPROC defined, might allow remote attackers to execute arbitrary code via unknown vectors, a different...

CVE-2007-5360

Buffer overflow in OpenPegasus Management server, when compiled to use PAM and with PEGASUSUSEPAMSTANDALONEPROC defined, as used in VMWare ESX Server 3.0.1 and 3.0.2, might allow remote attackers to execute arbitrary code via vectors related to PAM authentication, a different vulnerability than...

CVE-2007-5360

CVE-2007-5360 : A stack-based buffer overflow in the PAM-authenticated OpenPegasus Management server can allow a remote attacker to execute arbitrary code when OpenPegasus is compiled with PAM support (PEGASUS_USE_PAM_STANDALONE_PROC not defined). This affects VMware ESX Server 3.0.1/3.0.2 deploy...

CVE-2008-0003

CVE-2008-0003 records a stack-based buffer overflow in OpenPegasus tog-pegasus within PAM authentication (PAMCallback) when PAM is enabled and PEGASUS_USE_PAM_STANDALONE_PROC is not defined. The flaw could allow unauthenticated remote code execution on affected CIM management servers. Public refe...

CVE-2008-0003

Stack-based buffer overflow in the PAMBasicAuthenticator::PAMCallback function in OpenPegasus CIM management server tog-pegasus, when compiled to use PAM and without PEGASUSUSEPAMSTANDALONEPROC defined, might allow remote attackers to execute arbitrary code via unknown vectors, a different...

tog security update

CentOS Errata and Security Advisory CESA-2008:0002 Updated tog-pegasus packages that fix a security issue are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. The tog-pegasus packages provide...