CVE-2008-4315
tog-pegasus in OpenGroup Pegasus 2.7.0 on Red Hat Enterprise Linux (RHEL) 5, Fedora 9, and Fedora...
tog-pegasus in OpenGroup Pegasus 2.7.0 on Red Hat Enterprise Linux (RHEL) 5, Fedora 9, and Fedora 10 does not log failed authentication attempts to the OpenPegasus CIM server, which makes it easier for remote attackers to avoid detection of password guessing attacks.
Exploit likelihood
What each source reports
NVD Score used
tog-pegasus in OpenGroup Pegasus 2.7.0 on Red Hat Enterprise Linux (RHEL) 5, Fedora 9, and Fedora 10 does not log failed authentication attempts to the OpenPegasus CIM server, which makes it easier for remote attackers to avoid detection of password guessing attacks.
- Record
CVE-2008-4315- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
tog-pegasus in OpenGroup Pegasus 2.7.0 on Red Hat Enterprise Linux (RHEL) 5, Fedora 9, and Fedora 10 does not log failed authentication attempts to the OpenPegasus CIM server, which makes it easier for remote attackers to avoid detection of password guessing attacks.
- Record
CVE-2008-4315- Updated
- 2026-11-02
EUVDEUVD-2008-4296 No score
tog-pegasus in OpenGroup Pegasus 2.7.0 on Red Hat Enterprise Linux (RHEL) 5, Fedora 9, and Fedora 10 does not log failed authentication attempts to the OpenPegasus CIM server, which makes it easier for remote attackers to avoid detection of password guessing attacks.
- Record
EUVD-2008-4296- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-xwjw-7gc4-5h47 No score
tog-pegasus in OpenGroup Pegasus 2.7.0 on Red Hat Enterprise Linux (RHEL) 5, Fedora 9, and Fedora...
tog-pegasus in OpenGroup Pegasus 2.7.0 on Red Hat Enterprise Linux (RHEL) 5, Fedora 9, and Fedora 10 does not log failed authentication attempts to the OpenPegasus CIM server, which makes it easier for remote attackers to avoid detection of password guessing attacks.
- Record
GHSA-xwjw-7gc4-5h47- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
tog-pegasusRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 2:2.7.0-2.el5_2.1 | 2:2.7.0-2.el5_2.1 |
tog-pegasus-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 2:2.7.0-2.el5_2.1 | 2:2.7.0-2.el5_2.1 |
tog-pegasus-develRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 2:2.7.0-2.el5_2.1 | 2:2.7.0-2.el5_2.1 |
tog-pegasusRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 2:2.7.0-2.el5_2.1 | 2:2.7.0-2.el5_2.1 |
tog-pegasus-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 2:2.7.0-2.el5_2.1 | 2:2.7.0-2.el5_2.1 |
tog-pegasus-develRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 2:2.7.0-2.el5_2.1 | 2:2.7.0-2.el5_2.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-4315 is a medium vulnerability (CVSS 6.8) in Redhat Enterprise Linux, published November 27, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.70%, the 85th percentile. No source names a fixed version.
References
bugzilla.redhat.com/show_bug.cgi?id=472017
admin.fedoraproject.org/updates/tog-pegasus-2.7.0-7.fc9
securitytracker.com/id?1021281
osvdb.org/50278
redhat.com/support/errata/RHSA-2008-1001.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9431
Show 14 moreShow less
exchange.xforce.ibmcloud.com/vulnerabilities/46830
secunia.com/advisories/32862
nvd.nist.gov/vuln/detail/CVE-2008-4315
github.com/advisories/GHSA-xwjw-7gc4-5h47
access.redhat.com/errata/RHSA-2008:1001
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_1001.json
cve.org/CVERecord?id=CVE-2008-4313