# CVEs published 2008-11-27

5 CVEs were published on November 27, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-4313](https://cve.now/CVE-2008-4313.md): A certain Red Hat patch for tog-pegasus in OpenGroup Pegasus 2.7.0 does not properly configure the PAM tty name, which allows remote authent (no CVSS)
- [CVE-2008-4315](https://cve.now/CVE-2008-4315.md): tog-pegasus in OpenGroup Pegasus 2.7.0 on Red Hat Enterprise Linux (RHEL) 5, Fedora 9, and Fedora 10 does not log failed authentication atte (no CVSS)
- [CVE-2008-4636](https://cve.now/CVE-2008-4636.md): yast2-backup 2.14.2 through 2.16.6 on SUSE Linux and Novell Linux allows local users to gain privileges via shell metacharacters in filename (no CVSS)
- [CVE-2008-5256](https://cve.now/CVE-2008-5256.md): The AcquireDaemonLock function in ipcdUnix.cpp in Sun Innotek VirtualBox before 2.0.6 allows local users to overwrite arbitrary files via a (no CVSS)
- [CVE-2008-5257](https://cve.now/CVE-2008-5257.md): webseald in WebSEAL 6.0.0.17 in IBM Tivoli Access Manager for e-business allows remote attackers to cause a denial of service (crash or hang (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-11-27
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.