CVE ID:	CVE-2008-4313
Description:	A certain Red Hat patch for tog-pegasus in OpenGroup Pegasus 2.7.0 does not properly configure the PAM tty name, which allows remote authenticated users to bypass intended access restrictions and send requests to OpenPegasus WBEM services.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2008-4313 1021283 http://www.securitytracker.com/id?1021283 32460 http://www.securityfocus.com/bid/32460 32862 http://secunia.com/advisories/32862 50277 http://osvdb.org/50277 RHSA-2008:1001 http://www.redhat.com/support/errata/RHSA-2008-1001.html https://admin.fedoraproject.org/updates/tog-pegasus-2.7.0-7.fc9 https://admin.fedoraproject.org/updates/tog-pegasus-2.7.0-7.fc9 https://admin.fedoraproject.org/updates/tog-pegasus-2.7.1-3.fc10 https://admin.fedoraproject.org/updates/tog-pegasus-2.7.1-3.fc10 https://bugzilla.redhat.com/show_bug.cgi?id=459217 https://bugzilla.redhat.com/show_bug.cgi?id=459217 oval:org.mitre.oval:def:9556 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9556 togpegasus-wbem-security-bypass(46829) https://exchange.xforce.ibmcloud.com/vulnerabilities/46829