NVD

Id
3  
Name
CVE-2008-0003  
Description
Stack-based buffer overflow in the PAMBasicAuthenticator::PAMCallback function in OpenPegasus CIM management server (tog-pegasus), when compiled to use PAM and without PEGASUS_USE_PAM_STANDALONE_PROC defined, might allow remote attackers to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2007-5360.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-01-08  
Modified Date
2011-03-07  
Seq
2008-0003  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
39 3 CVE-2008-0003 HPSBMA02331  View
40 3 CVE-2008-0003 [Security-announce] 20080415 VMSA-2008-0007 Moderate Updated Service Console packages pcre, net-snmp, and OpenPegasus  View
41 3 CVE-2008-0003 oval:org.mitre.oval:def:10282  View
42 3 CVE-2008-0003 1019159  View
43 3 CVE-2008-0003 20080115 vuldb confusion between OpenPegasus issues  View
44 3 CVE-2008-0003 RHSA-2008:0002  View
45 3 CVE-2008-0003 20080416 VMSA-2008-0007 Moderate Updated Service Console packages pcre, net-snmp, and OpenPegasus  View
46 3 CVE-2008-0003 27172  View
47 3 CVE-2008-0003 27188  View
48 3 CVE-2008-0003 ADV-2008-0063  View
49 3 CVE-2008-0003 ADV-2008-0638  View
50 3 CVE-2008-0003 ADV-2008-1234  View
51 3 CVE-2008-0003 ADV-2008-1391  View
52 3 CVE-2008-0003 http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4129  View
53 3 CVE-2008-0003 openpegasus-pambasic-bo(39527)  View
54 3 CVE-2008-0003 https://bugzilla.redhat.com/show_bug.cgi?id=426578  View
55 3 CVE-2008-0003 FEDORA-2008-0506  View
56 3 CVE-2008-0003 FEDORA-2008-0572  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
45699 JVNDB-2008-001009 OpenPegasus CIM マネジメントサーバ (tog-pegasus) におけるバッファオーバーフローの脆弱性 OpenPegasus CIM マネジメントサーバ (tog-pegasus) には、PEGASUS_USE_PAM_STANDALONE_PROC を定義せずに、PAM を使用してコンパイルする場合、PAMBasicAuthenticator::PAMCallback() 関数でスタックベースのバッファオーバーフローが発生する可能性があります。 CVE-2008-0003 30116 CVE-2008-0003 3 10 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001009.html 2008-01-07 2008-03-05 View