CVE-2008-0003

CVE-2008-0003 records a stack-based buffer overflow in OpenPegasus tog-pegasus within PAM authentication (PAMCallback) when PAM is enabled and PEGASUS_USE_PAM_STANDALONE_PROC is not defined. The flaw could allow unauthenticated remote code execution on affected CIM management servers. Public refe...

CVE-2007-5360

CVE-2007-5360 : A stack-based buffer overflow in the PAM-authenticated OpenPegasus Management server can allow a remote attacker to execute arbitrary code when OpenPegasus is compiled with PAM support (PEGASUS_USE_PAM_STANDALONE_PROC not defined). This affects VMware ESX Server 3.0.1/3.0.2 deploy...