CentOS Update for tog-pegasus CESA-2008:0002 centos4 i386

Check for the Version of tog-pegasus OpenVAS Vulnerability Test CentOS Update for tog-pegasus CESA-2008:0002 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

CentOS Update for tog-pegasus CESA-2008:0002 centos4 x86_64

Check for the Version of tog-pegasus OpenVAS Vulnerability Test CentOS Update for tog-pegasus CESA-2008:0002 centos4 x8664 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

CentOS Update for tog-pegasus CESA-2008:0002 centos4 i386

Check for the Version of tog-pegasus OpenVAS Vulnerability Test CentOS Update for tog-pegasus CESA-2008:0002 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Fedora Update for tog-pegasus FEDORA-2008-0506

Check for the Version of tog-pegasus OpenVAS Vulnerability Test Fedora Update for tog-pegasus FEDORA-2008-0506 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Fedora Update for tog-pegasus FEDORA-2008-0506

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for tog-pegasus FEDORA-2008-0572

Check for the Version of tog-pegasus OpenVAS Vulnerability Test Fedora Update for tog-pegasus FEDORA-2008-0572 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Fedora Update for tog-pegasus FEDORA-2008-0572

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Design/Logic Flaw

tog-pegasus in OpenGroup Pegasus 2.7.0 on Red Hat Enterprise Linux RHEL 5, Fedora 9, and Fedora 10 does not log failed authentication attempts to the OpenPegasus CIM server, which makes it easier for remote attackers to avoid detection of password guessing attacks...

CVE-2008-4313

A certain Red Hat patch for tog-pegasus in OpenGroup Pegasus 2.7.0 does not properly configure the PAM tty name, which allows remote authenticated users to bypass intended access restrictions and send requests to OpenPegasus WBEM services...

CVE-2008-4315

tog-pegasus in OpenGroup Pegasus 2.7.0 on Red Hat Enterprise Linux RHEL 5, Fedora 9, and Fedora 10 does not log failed authentication attempts to the OpenPegasus CIM server, which makes it easier for remote attackers to avoid detection of password guessing attacks...

Design/Logic Flaw

A certain Red Hat patch for tog-pegasus in OpenGroup Pegasus 2.7.0 does not properly configure the PAM tty name, which allows remote authenticated users to bypass intended access restrictions and send requests to OpenPegasus WBEM services...

CVE-2008-4313

A certain Red Hat patch for tog-pegasus in OpenGroup Pegasus 2.7.0 does not properly configure the PAM tty name, which allows remote authenticated users to bypass intended access restrictions and send requests to OpenPegasus WBEM services...

CVE-2008-4315

CVE-2008-4315 affects tog-pegasus (OpenPegasus WBEM) on RHEL 5, Fedora 9/10. The root cause is that failed authentication attempts to the OpenPegasus CIM server are not logged, which can enable password-guessing attacks to go undetected. Public references in connected documents show Red Hat/CentO...

CVE-2008-4313

CVE-2008-4313 concerns tog-pegasus (OpenPegasus WBEM) on OpenGroup Pegasus 2.7.0 where a Red Hat patch failed to properly configure the PAM tty name, enabling remote authenticated users to bypass access controls and issue requests to WBEM services. Connected advisories (RHSA-2008:1001; CentOS/CES...

CVE-2008-4315

tog-pegasus in OpenGroup Pegasus 2.7.0 on Red Hat Enterprise Linux RHEL 5, Fedora 9, and Fedora 10 does not log failed authentication attempts to the OpenPegasus CIM server, which makes it easier for remote attackers to avoid detection of password guessing attacks...

tog-pegasus: WBEM services access not restricted to dedicated user after 2.7.0 rebase

A certain Red Hat patch for tog-pegasus in OpenGroup Pegasus 2.7.0 does not properly configure the PAM tty name, which allows remote authenticated users to bypass intended access restrictions and send requests to OpenPegasus WBEM services...

tog-pegasus: failed authentication attempts not logged via PAM

tog-pegasus in OpenGroup Pegasus 2.7.0 on Red Hat Enterprise Linux RHEL 5, Fedora 9, and Fedora 10 does not log failed authentication attempts to the OpenPegasus CIM server, which makes it easier for remote attackers to avoid detection of password guessing attacks...

tog-pegasus security update

2.7.0-2.0.1.el52.1 - Added pegasus-enterprise.patch to allow detection of enterprise-release 2.7.0-2.el52.1 - Fix local-or-remote-auth patch and enhance PAM security settings Resolves: 471370...

Design/Logic Flaw

Untrusted search path vulnerability in a certain Red Hat build script for Standards Based Linux Instrumentation for Manageability sblim libraries before 1-13a.el46.1 in Red Hat Enterprise Linux RHEL 4, and before 1-31.el52.1 in RHEL 5, allows local users to gain privileges via a malicious library...

Unfixed XSS vulnerability at www.pegasus-searching.com

Security researcher cueballr, has submitted on 20/04/2008 a cross-site-scripting XSS vulnerability affecting www.pegasus-searching.com, which at the time of submission ranked 3329650 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/04/2008. I...