OSVDB ID: 40082

Title: OpenPegasus CIM Management Server (tog-pegasus) PAMBasicAuthenticator::PAMCallback Function Remote Overflow

Info

Disclosure

Dec 22, 2007

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

Classification

Location: Remote / Network Access
Attack Type: Input Manipulation
Impact: Loss of Integrity
Disclosure: Vendor Verified

Solution

Products

Unknown or Incomplete

References

CVE ID: 2008-0003 (see also: NVD)
Secunia Advisory ID: 28338 28358 29056 29785 29986
ISS X-Force ID: 39527
Other Advisory URL: HPSBMA02331 SSRT080000: http://lists.vmware.com/pipermail/security-announce/2008/000014.html
Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2008-04/0360.html
http://attrition.org/pipermail/vim/2008-January/001879.html
Vendor Specific News/Changelog Entry: http://www14.software.ibm.com/webapp/set2/subscriptions/ijhifoeblist?mode=7&heading=AIX61&path=%2F200802%2FSECURITY%2F20080221%2Fdatafile112135&label=IBM+Pegasus+CIM+Server+for+Director+on+AIX+vulnerabilities
https://bugzilla.redhat.com/show_bug.cgi?id=426578
RedHat RHSA: RHSA-2008:0002

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/40082