Lucene search

K
prionPRIOn knowledge basePRION:CVE-2008-3270
HistoryAug 18, 2008 - 5:41 p.m.

Design/Logic Flaw

2008-08-1817:41:00
PRIOn knowledge base
www.prio-n.com
4

6.7 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

47.2%

yum-rhn-plugin in Red Hat Enterprise Linux (RHEL) 5 does not verify the SSL certificate for a file download from a Red Hat Network (RHN) server, which makes it easier for remote man-in-the-middle attackers to cause a denial of service (loss of updates) or force the download and installation of official Red Hat packages that were not requested.

CPENameOperatorVersion
enterprise_linuxeq5.0

6.7 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

47.2%