CVE-2008-4313
A certain Red Hat patch for tog-pegasus in OpenGroup Pegasus 2.7.0 does not properly configure...
A certain Red Hat patch for tog-pegasus in OpenGroup Pegasus 2.7.0 does not properly configure the PAM tty name, which allows remote authenticated users to bypass intended access restrictions and send requests to OpenPegasus WBEM services.
Exploit likelihood
What each source reports
NVD Score used
A certain Red Hat patch for tog-pegasus in OpenGroup Pegasus 2.7.0 does not properly configure the PAM tty name, which allows remote authenticated users to bypass intended access restrictions and send requests to OpenPegasus WBEM services.
- Record
CVE-2008-4313- CVSS 2.0
- 6.0 Medium
AV:N/AC:M/Au:S/C:P/I:P/A:P - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
A certain Red Hat patch for tog-pegasus in OpenGroup Pegasus 2.7.0 does not properly configure the PAM tty name, which allows remote authenticated users to bypass intended access restrictions and send requests to OpenPegasus WBEM services.
- Record
CVE-2008-4313- Updated
- 2026-11-02
EUVDEUVD-2008-4294 No score
A certain Red Hat patch for tog-pegasus in OpenGroup Pegasus 2.7.0 does not properly configure the PAM tty name, which allows remote authenticated users to bypass intended access restrictions and send requests to OpenPegasus WBEM services.
- Record
EUVD-2008-4294- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-98w9-9xc5-rh5r No score
A certain Red Hat patch for tog-pegasus in OpenGroup Pegasus 2.7.0 does not properly configure...
A certain Red Hat patch for tog-pegasus in OpenGroup Pegasus 2.7.0 does not properly configure the PAM tty name, which allows remote authenticated users to bypass intended access restrictions and send requests to OpenPegasus WBEM services.
- Record
GHSA-98w9-9xc5-rh5r- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
tog-pegasusRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 2:2.7.0-2.el5_2.1 | 2:2.7.0-2.el5_2.1 |
tog-pegasus-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 2:2.7.0-2.el5_2.1 | 2:2.7.0-2.el5_2.1 |
tog-pegasus-develRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 2:2.7.0-2.el5_2.1 | 2:2.7.0-2.el5_2.1 |
tog-pegasusRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 2:2.7.0-2.el5_2.1 | 2:2.7.0-2.el5_2.1 |
tog-pegasus-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 2:2.7.0-2.el5_2.1 | 2:2.7.0-2.el5_2.1 |
tog-pegasus-develRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 2:2.7.0-2.el5_2.1 | 2:2.7.0-2.el5_2.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-4313 is a medium vulnerability (CVSS 6.0) in Redhat Enterprise Linux, published November 27, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.41%, the 72nd percentile. No source names a fixed version.
References
securitytracker.com/id?1021283
admin.fedoraproject.org/updates/tog-pegasus-2.7.0-7.fc9
bugzilla.redhat.com/show_bug.cgi?id=459217
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9556
securityfocus.com/bid/32460
redhat.com/support/errata/RHSA-2008-1001.html
Show 15 moreShow less
exchange.xforce.ibmcloud.com/vulnerabilities/46829
osvdb.org/50277
secunia.com/advisories/32862
nvd.nist.gov/vuln/detail/CVE-2008-4313
github.com/advisories/GHSA-98w9-9xc5-rh5r
access.redhat.com/errata/RHSA-2008:1001
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_1001.json
cve.org/CVERecord?id=CVE-2008-4313