CVE-2007-5360: Buffer overflow in OpenPegasus Management server, when compiled to use PAM and with PEGASUS_USE_PAM_STANDAL...

Security readout for executives and security teams

This is an old buffer overflow in the OpenPegasus management service under a specific PAM build configuration. VMware ESX Server 3.0.1 and 3.0.2 are named as affected. Successful exploitation might allow arbitrary code execution, so any remaining legacy systems should be treated as business risk. Likely exposure is limited to legacy OpenPegasus deployments with the specific PAM standalone process build option, especially VMware ESX Server 3.0.1 and 3.0.2. Evidence for broader products is incomplete in the bundle. Prioritize remediation where legacy virtualization management hosts remain in use. The issue is old, but management-plane code execution risk can have outsized impact if exposed or unsupported. Mitigation focus: Apply relevant VMware or OS vendor updates referenced by the advisories.; Retire or isolate unsupported VMware ESX 3.0.1 and 3.0.2 systems.; Restrict OpenPegasus management access to trusted administration networks..

Prepared

Jun 28, 2026, 19:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.