NVD

Id
4143  
Name
CVE-2008-4315  
Description
tog-pegasus in OpenGroup Pegasus 2.7.0 on Red Hat Enterprise Linux (RHEL) 5, Fedora 9, and Fedora 10 does not log failed authentication attempts to the OpenPegasus CIM server, which makes it easier for remote attackers to avoid detection of password guessing attacks.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-11-26  
Modified Date
2010-08-21  
Seq
2008-4315  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
26446 4143 CVE-2008-4315 oval:org.mitre.oval:def:9431  View
26447 4143 CVE-2008-4315 RHSA-2008:1001  View
26448 4143 CVE-2008-4315 1021281  View
26449 4143 CVE-2008-4315 togpegasus-systemlog-weak-security(46830)  View
26450 4143 CVE-2008-4315 https://admin.fedoraproject.org/updates/tog-pegasus-2.7.0-7.fc9  View
26451 4143 CVE-2008-4315 https://admin.fedoraproject.org/updates/tog-pegasus-2.7.1-3.fc10  View
26452 4143 CVE-2008-4315 https://bugzilla.redhat.com/show_bug.cgi?id=472017  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46742 JVNDB-2008-002052 OpenGroup Pegasus の tog-pegasus における認証失敗のログが記録されない脆弱性 Red Hat Enterprise Linux 上で稼働している OpenGroup Pegasus の tog-pegasus には、OpenPegasus CIM サーバへの認証失敗のログを記録しないため、パスワード推測攻撃が行いやすくなる脆弱性が存在します。 CVE-2008-4315 34428 CVE-2008-4315 4143 6.8 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002052.html 2008-11-27 2008-12-22 View