Test ID:	1.3.6.1.4.1.25623.1.0.122540
Category:	Oracle Linux Local Security Checks
Title:	Oracle: Security Advisory (ELSA-2008-1001)
Summary:	The remote host is missing an update for the 'tog-pegasus' package(s) announced via the ELSA-2008-1001 advisory.
Description:	Summary: The remote host is missing an update for the 'tog-pegasus' package(s) announced via the ELSA-2008-1001 advisory. Vulnerability Insight: [2.7.0-2.0.1.el5_2.1] - Added pegasus-enterprise.patch to allow detection of enterprise-release [2.7.0-2.el5_2.1] - Fix local-or-remote-auth patch and enhance PAM security settings Resolves: #471370 Affected Software/OS: 'tog-pegasus' package(s) on Oracle Linux 5. Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2008-4313 1021283 http://www.securitytracker.com/id?1021283 32460 http://www.securityfocus.com/bid/32460 32862 http://secunia.com/advisories/32862 50277 http://osvdb.org/50277 RHSA-2008:1001 http://www.redhat.com/support/errata/RHSA-2008-1001.html https://admin.fedoraproject.org/updates/tog-pegasus-2.7.0-7.fc9 https://admin.fedoraproject.org/updates/tog-pegasus-2.7.1-3.fc10 https://bugzilla.redhat.com/show_bug.cgi?id=459217 oval:org.mitre.oval:def:9556 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9556 togpegasus-wbem-security-bypass(46829) https://exchange.xforce.ibmcloud.com/vulnerabilities/46829 Common Vulnerability Exposure (CVE) ID: CVE-2008-4315 1021281 http://www.securitytracker.com/id?1021281 50278 http://osvdb.org/50278 https://bugzilla.redhat.com/show_bug.cgi?id=472017 oval:org.mitre.oval:def:9431 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9431 togpegasus-systemlog-weak-security(46830) https://exchange.xforce.ibmcloud.com/vulnerabilities/46830
Copyright	Copyright (C) 2015 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.