PT-2011-1298

Name of the Vulnerable Software and Affected Versions Red Hat Network RHN Satellite Server versions 5.3 through 5.4 Description The issue allows remote attackers to obtain sensitive host information or use the server as a proxy to connect to arbitrary services and IP addresses. Recommendations Fo...

CVE-2009-0788: Exposure of Sensitive Information to an Unauthorized Actor

Red Hat Network RHN Satellite Server 5.3 and 5.4 does not properly rewrite unspecified URLs, which allows remote attackers to 1 obtain unspecified sensitive host information or 2 use the server as an inadvertent proxy to connect to arbitrary services and IP addresses via unspecified vectors...

CVE-2011-0718

Red Hat Network RHN Satellite Server 5.4 does not use a time delay after a failed login attempt, which makes it easier for remote attackers to conduct brute force password guessing attacks...

CVE-2011-0717: Undefined Security Weakness

Session fixation vulnerability in Red Hat Network RHN Satellite Server 5.4 allows remote attackers to hijack web sessions via unspecified vectors related to Spacewalk...

CVE-2011-0718: Improper Authentication

Red Hat Network RHN Satellite Server 5.4 does not use a time delay after a failed login attempt, which makes it easier for remote attackers to conduct brute force password guessing attacks...