openpegasus records
5 published records for vendor openpegasus.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 2
- With a fix record
- 60%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer2
- CWE-20 Improper Input Validation1
- CWE-264 Permissions, Privileges, and Access Controls1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
5 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
42Plan | CVE-2008-0003No exploit | Stack-based buffer overflow in the PAMBasicAuthenticator::PAMCallback function in OpenPegasus CIM management server (tog-pegasus), when compopenpegasus · management server · CWE-119 | Critical10.0 | — | 7.8% | Jan 8, 2008 |
35Monitor | CVE-2007-5360No exploit | Buffer overflow in OpenPegasus Management server, when compiled to use PAM and with PEGASUS_USE_PAM_STANDALONE_PROC defined, as used in VMWaopenpegasus · management server · CWE-119 | High7.5 | — | 15.3% | Jan 8, 2008 |
31Monitor | CVE-2011-4967No exploit | tog-Pegasus has a package hash collision DoS vulnerabilityopenpegasus · tog-pegasus · CWE-20 | High7.5 | — | 2.6% | Nov 19, 2019 |
28Monitor | CVE-2008-4315No exploit | tog-pegasus in OpenGroup Pegasus 2.7.0 on Red Hat Enterprise Linux (RHEL) 5, Fedora 9, and Fedora 10 does not log failed authentication atteredhat · enterprise linux | Medium6.8 | — | 2.7% | Nov 26, 2008 |
24Monitor | CVE-2008-4313No exploit | A certain Red Hat patch for tog-pegasus in OpenGroup Pegasus 2.7.0 does not properly configure the PAM tty name, which allows remote authentredhat · enterprise linux · CWE-264 | Medium6.0 | — | 1.4% | Nov 26, 2008 |
- CVE-2008-000342Plan
Stack-based buffer overflow in the PAMBasicAuthenticator::PAMCallback function in OpenPegasus CIM management server (tog-pegasus), when comp
CriticalCVSS 10.0No exploitEPSS 7%openpegasus · management serverJan 8, 2008
- CVE-2007-536035Monitor
Buffer overflow in OpenPegasus Management server, when compiled to use PAM and with PEGASUS_USE_PAM_STANDALONE_PROC defined, as used in VMWa
HighCVSS 7.5No exploitEPSS 15%openpegasus · management serverJan 8, 2008
- CVE-2011-496731Monitor
tog-Pegasus has a package hash collision DoS vulnerability
HighCVSS 7.5No exploitEPSS 2%openpegasus · tog-pegasusNov 19, 2019
- CVE-2008-431528Monitor
tog-pegasus in OpenGroup Pegasus 2.7.0 on Red Hat Enterprise Linux (RHEL) 5, Fedora 9, and Fedora 10 does not log failed authentication atte
MediumCVSS 6.8No exploitEPSS 2%redhat · enterprise linuxNov 26, 2008
- CVE-2008-431324Monitor
A certain Red Hat patch for tog-pegasus in OpenGroup Pegasus 2.7.0 does not properly configure the PAM tty name, which allows remote authent
MediumCVSS 6.0No exploitEPSS 1%redhat · enterprise linuxNov 26, 2008