CVE-2015-1777

CVE-2015-1777 affects rhnreg_ks in Red Hat Network Client Tools (rhn-client-tools) on Red Hat Gluster Storage 2.1 and RHEL 5, 6, 7. The component fails to properly validate hostnames in X.509 certificates from SSL servers, enabling a remote MITM that can prevent system registration. Root cause: h...

PT-2018-4346

Name of the Vulnerable Software and Affected Versions Red Hat Network Client Tools versions on Red Hat Gluster Storage 2.1 and Enterprise Linux RHEL 5, 6, and 7 Description The issue is related to the rhnreg ks component in Red Hat Network Client Tools, which fails to properly validate hostnames ...

CVE-2015-1777: Improper Certificate Validation

rhnregks in Red Hat Network Client Tools aka rhn-client-tools on Red Hat Gluster Storage 2.1 and Enterprise Linux RHEL 5, 6, and 7 does not properly validate hostnames in X.509 certificates from SSL servers, which allows remote attackers to prevent system registration via a man-in-the-middle atta...

SUSE SLES11 Security Update : SUSE Manager Client Tools (SUSE-SU-2017:1347-1)

The following security issue in spacewalk-backend has been fixed : - Non admin or disabled user cannot make changes to a system anymore using spacewalk-channel. bsc1026633, CVE-2017-7470 The update package also includes non-security fixes. See advisory for details. Note that Tenable Network...

SUSE-RU-2017:0174-1 Recommended update for SUSE Manager Client Tools

This update fixes the following issues: osad: - Fix logfile option for osa-dispatcher. bsc980752 salt: - Update to 2015.8.12 - Add pre-require to salt for minions. - Do not restart salt-minion in salt package. - Add try-restart to sys-v init scripts. - Add 'Restart=on-failure' for salt-minion...

SUSE SLES11 Security Update : SUSE Manager Client Tools (SUSE-SU-2016:1366-1)

This update for SUSE Manager Client Tools provides the following fixes and enhancements : rhnlib : - Use TLSv1METHOD in SSL Context bsc970989 suseRegisterInfo : - Fix file permissions bsc970550 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE...

SUSE-SU-2016:1366-1 Recommended udpate for SUSE Manager Client Tools

This update for SUSE Manager Client Tools provides the following fixes and enhancements: rhnlib: - Use TLSv1METHOD in SSL Context bsc970989 suseRegisterInfo: - Fix file permissions bsc970550...

PT-2016-7914

Name of the Vulnerable Software and Affected Versions SUSE Manager Client Tools affected versions not specified Description The issue concerns the SUSE Manager Client Tools, where fixes and enhancements have been provided. Specifically, the rhnlib component now uses TLSv1 METHOD in the SSL Contex...

Important: Red Hat Security Advisory: Red Hat Storage 2.0 security, bug fix, and enhancement update #4

Updated Red Hat Storage 2.0 packages that fix multiple security issues, several bugs, and add enhancements are now available. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

[SECURITY] Fedora 16 Update: squid-3.2.5-1.fc16

Squid is a high-performance proxy caching server for Web clients, supporting FTP, gopher, and HTTP data objects. Unlike traditional caching software, Squid handles all requests in a single, non-blocking, I/O-driven process. Squid keeps meta data and especially hot objects cached in RAM, caches DN...

Scientific Linux Security Update : rhn-client-tools on SL5.x i386/x86_64

It was discovered that rhn-client-tools set insecure permissions on the loginAuth.pkl file, used to store session credentials for authenticating connections to servers. A local, unprivileged user could use these credentials to download packages they wouldn't normally have permission to download...

Moderate: Red Hat Security Advisory: ipa security and bug fix update

Updated ipa packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

CVE-2010-1439

yum-rhn-plugin in Red Hat Network Client Tools aka rhn-client-tools on Red Hat Enterprise Linux RHEL 5 and Fedora uses world-readable permissions for the /var/spool/up2date/loginAuth.pkl file, which allows local users to access the Red Hat Network profile, and possibly prevent future security...

Authentication flaw

yum-rhn-plugin in Red Hat Network Client Tools aka rhn-client-tools on Red Hat Enterprise Linux RHEL 5 and Fedora uses world-readable permissions for the /var/spool/up2date/loginAuth.pkl file, which allows local users to access the Red Hat Network profile, and possibly prevent future security...

CVE-2010-1439

yum-rhn-plugin in Red Hat Network Client Tools aka rhn-client-tools on Red Hat Enterprise Linux RHEL 5 and Fedora uses world-readable permissions for the /var/spool/up2date/loginAuth.pkl file, which allows local users to access the Red Hat Network profile, and possibly prevent future security...

CVE-2010-1439

CVE-2010-1439 affects yum-rhn-plugin in Red Hat Network Client Tools (rhn-client-tools) on RHEL5 and Fedora. The root cause is world-readable permissions on /var/spool/up2date/loginAuth.pkl, enabling local users to access the Red Hat Network profile and potentially disrupt future updates. The iss...

RedHat Update for rhn-client-tools RHSA-2010:0449-01

Check for the Version of rhn-client-tools OpenVAS Vulnerability Test RedHat Update for rhn-client-tools RHSA-2010:0449-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

RedHat Update for rhn-client-tools RHSA-2010:0449-01

Check for the Version of rhn-client-tools OpenVAS Vulnerability Test RedHat Update for rhn-client-tools RHSA-2010:0449-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

CVE-2010-1439: Undefined Security Weakness

yum-rhn-plugin in Red Hat Network Client Tools aka rhn-client-tools on Red Hat Enterprise Linux RHEL 5 and Fedora uses world-readable permissions for the /var/spool/up2date/loginAuth.pkl file, which allows local users to access the Red Hat Network profile, and possibly prevent future security...