Unfixed XSS vulnerability at www.pegasus-searching.com

Security researcher cueballr, has submitted on 20/04/2008 a cross-site-scripting XSS vulnerability affecting www.pegasus-searching.com, which at the time of submission ranked 3329650 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/04/2008. I...

CVE-2008-0495

Unspecified vulnerability in the Pegasus CIM Server in IBM Hardware Management Console HMC 7 R3.2.0 allows remote attackers to cause a denial of service via unspecified vectors...

CVE-2008-0495

Technical details about CVE-2008-0495 are not publicly available in the provided documents. Monitor for updates; current records only state an unspecified denial-of-service vulnerability in IBM HMC Pegasus CIM Server with no exposed vectors or affected versions.

Fedora 8 : tog-pegasus-2.6.1-3.fc8 (2008-0572)

Thu Jan 10 2008 Vitezslav Crhonek - 2.6.1-3 - Fix PAM authentication buffer overflow CVE-2008-0003 Resolves: 427829 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format...

Fedora 7 : tog-pegasus-2.6.0-3.fc7 (2008-0506)

Thu Jan 10 2008 Vitezslav Crhonek - 2.6.0-3 - Fix PAM authentication buffer overflow CVE-2008-0003 Resolves: 427828 - Wed Mar 28 2007 Vitezslav Crhonek - 2.6.0-2 - Update changelog - Build with Open Pegasus' Makefiles, istall with RedHats Mark Hamzy Note that Tenable Network Security has...

CentOS 4 / 5 : tog-pegasus (CESA-2008:0002)

Updated tog-pegasus packages that fix a security issue are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. The tog-pegasus packages provide OpenPegasus Web-Based Enterprise Management WBEM...

CVE-2008-0003

CVE-2008-0003 records a stack-based buffer overflow in OpenPegasus tog-pegasus within PAM authentication (PAMCallback) when PAM is enabled and PEGASUS_USE_PAM_STANDALONE_PROC is not defined. The flaw could allow unauthenticated remote code execution on affected CIM management servers. Public refe...

RHEL 4 / 5 : tog-pegasus (RHSA-2008:0002)

Updated tog-pegasus packages that fix a security issue are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. The tog-pegasus packages provide OpenPegasus Web-Based Enterprise Management WBEM...

Critical: Red Hat Security Advisory: tog-pegasus security update

Updated tog-pegasus packages that fix a security issue are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. The tog-pegasus packages provide OpenPegasus Web-Based Enterprise Management WBEM...

Critical: tog-pegasus security update

2.6.1-2.el51.1.0.1 - Added pegasus-enterprise.patch to allow detection of enterprise-release 2.6.1-2.el51.1 - Fix PAM authentication buffer overflow CVE-2008-0003 Resolves: 427213...

Path traversal

Multiple absolute path traversal vulnerabilities in Pegasus Imaging ImagXpress 8.0 allow remote attackers to 1 delete arbitrary files via the CacheFile attribute in the ThumbnailXpres.1 ActiveX control PegasusImaging.ActiveX.ThumnailXpress1.dll or 2 overwrite arbitrary files via the CompactFile...

CVE-2007-5320

Multiple absolute path traversal vulnerabilities in Pegasus Imaging ImagXpress 8.0 allow remote attackers to 1 delete arbitrary files via the CacheFile attribute in the ThumbnailXpres.1 ActiveX control PegasusImaging.ActiveX.ThumnailXpress1.dll or 2 overwrite arbitrary files via the CompactFile...

CVE-2007-5320

Pegasus Imaging ImagXpress 8.0 contains multiple absolute path traversal vulnerabilities. In particular, the ThumbNailXpress1 ActiveX control’s CacheFile attribute and the ImagXpress8 ActiveX control’s CompactFile function can be abused to delete or overwrite arbitrary files on affected systems. ...

pegasus-overwrite.txt

----------------------------------------------------------------------------- Pegasus Imaging ImagXpress 8.0 Remote Arbitrary File Overwrite url: http://www.pegasusimaging.com/ Author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written for educational...

Pegasus Imaging ImagXpress 8.0 Remote Arbitrary File Overwrite

No description provided by source. pre codespan style="font: 10pt Courier New;"span class="general1-symbol"body bgcolor="E0E0E0"----------------------------------------------------------------------------- bPegasus Imaging ImagXpress 8.0 Remote Arbitrary File Overwrite/b url:...

pegasus-delete.txt

----------------------------------------------------------------------------- Pegasus Imaging ThumbnailXpress 1.0 Remote Arbitrary File Deletion url: http://www.pegasusimaging.com/ Author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written for educational...

Pegasus Imaging ThumbnailXpress 1.0 Remote Arbitrary File Deletion

No description provided by source. pre codespan style="font: 10pt Courier New;"span class="general1-symbol"body bgcolor="E0E0E0"----------------------------------------------------------------------------- bPegasus Imaging ThumbnailXpress 1.0 Remote Arbitrary File Deletion/b url:...

Pegasus Imaging ImagXpress 8.0 - Arbitrary File Overwrite

Pegasus Imaging ImagXpress 8.0 - Arbitrary File Overwrite ----------------------------------------------------------------------------- Pegasus Imaging ImagXpress 8.0 Remote Arbitrary File Overwrite url: http://www.pegasusimaging.com/ Author: shinnai mail: shinnaiatautisticidotorg site:...

Pegasus Imaging ImagXpress 8.0 Remote Arbitrary File Overwrite

Exploit for unknown platform in category remote exploits ============================================================== Pegasus Imaging ImagXpress 8.0 Remote Arbitrary File Overwrite ==============================================================...

Pegasus Imaging ThumbnailXpress 1.0 - Arbitrary File Deletion

----------------------------------------------------------------------------- Pegasus Imaging ThumbnailXpress 1.0 Remote Arbitrary File Deletion url: http://www.pegasusimaging.com/ Author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written for educational...