返回 CVE 浏览器

CVE-2008-0003

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.1720%

EPSS Percentile26.70th

Published2008年1月8日

Last Modified2026年4月23日

Vulnerability Description

Stack-based buffer overflow in the PAMBasicAuthenticator::PAMCallback function in OpenPegasus CIM management server (tog-pegasus), when compiled to use PAM and without PEGASUS_USE_PAM_STANDALONE_PROC defined, might allow remote attackers to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2007-5360.

Affected Platforms (CPE)

📦

Openpegasus

Management Server

= 2.6.1

References & Advisories

🔗 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01438409

🔗 http://lists.vmware.com/pipermail/security-announce/2008/000014.html

🔗 http://osvdb.org/40082

🔗 http://secunia.com/advisories/28338

🔗 http://secunia.com/advisories/28462

🔗 http://secunia.com/advisories/29056

🔗 http://secunia.com/advisories/29785

🔗 http://secunia.com/advisories/29986

相关漏洞威胁

CVE-2019-1664910.0

On Supermicro H11, H12, M11, X9, X10, and X11 products, a combination of encryption and authentication problems in the virtual med...

CVE-2019-1665010.0

On Supermicro X10 and X11 products, a client's access privileges may be transferred to a different client that later has the same ...

CVE-2018-399110.0

An exploitable heap overflow vulnerability exists in the WkbProgramLow function of WibuKey Network server management, version 6.40...

CVE-2020-941110.0

The file transfer component of TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server for IBM i contains a vulnerabilit...