vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2008-0003

N/A
Published: January 8, 2008 at 08:00 PM UTC
Updated: June 16, 2026 at 10:48 PM UTC
1 product affected across 1 vendorManagement Server· also runs on 2 platforms

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 8%

Description

Stack-based buffer overflow in the PAMBasicAuthenticator::PAMCallback function in OpenPegasus CIM management server (tog-pegasus), when compiled to use PAM and without PEGASUS_USE_PAM_STANDALONE_PROC defined, might allow remote attackers to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2007-5360.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Management Server· Openpegasus
95%
2.6.1
redhat-enterprise-linux (environment) · redhat-enterprise-linux-desktop (environment)

Runs on — not affected

The affected product only carries this flaw when running on these platforms. The platforms themselves are not vulnerable.

References (24)

Vendor Advisoryx_refsource_HP
Source: [email protected]
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01438409
Mailing Listx_refsource_MLIST
Source: [email protected]
http://lists.vmware.com/pipermail/security-announce/2008/000014.html
VDB Entryx_refsource_OSVDB
Source: [email protected]
http://osvdb.org/40082
Third Party Advisoryx_refsource_SECUNIAVendor Advisory
Source: [email protected]
http://secunia.com/advisories/28338
Third Party Advisoryx_refsource_SECUNIAVendor Advisory
Source: [email protected]
http://secunia.com/advisories/28462
Third Party Advisoryx_refsource_SECUNIAVendor Advisory
Source: [email protected]
http://secunia.com/advisories/29056
Third Party Advisoryx_refsource_SECUNIAVendor Advisory
Source: [email protected]
http://secunia.com/advisories/29785
Third Party Advisoryx_refsource_SECUNIAVendor Advisory
Source: [email protected]
http://secunia.com/advisories/29986

CVSS

10HIGH[email protected]
Confidentiality
COMPLETE
Integrity
COMPLETE
Availability
COMPLETE
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-119

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card