RHSA-2010:0449 Red Hat Security Advisory: rhn-client-tools security update

Bulletin has no description...

RHEL 6 : rhn-client-tools (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - rhn-setup: rhnregks fails to properly validate SSL/TLS certificates CVE-2015-1777 Note that Nessus has not tested f...

satellite-5-client module update

An update is available for dnf-plugin-spacewalk, rhn-client-tools, rhnsd, rhnlib. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Satellite 5 client module...

CVE-2015-1777

CVE-2015-1777 affects rhnreg_ks in Red Hat Network Client Tools (rhn-client-tools) on Red Hat Gluster Storage 2.1 and RHEL 5, 6, 7. The component fails to properly validate hostnames in X.509 certificates from SSL servers, enabling a remote MITM that can prevent system registration. Root cause: h...

Important: Red Hat Security Advisory: Red Hat Storage 2.0 security, bug fix, and enhancement update #4

Updated Red Hat Storage 2.0 packages that fix multiple security issues, several bugs, and add enhancements are now available. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

Scientific Linux Security Update : rhn-client-tools on SL5.x i386/x86_64

It was discovered that rhn-client-tools set insecure permissions on the loginAuth.pkl file, used to store session credentials for authenticating connections to servers. A local, unprivileged user could use these credentials to download packages they wouldn't normally have permission to download...

CVE-2010-1439

CVE-2010-1439 affects yum-rhn-plugin in Red Hat Network Client Tools (rhn-client-tools) on RHEL5 and Fedora. The root cause is world-readable permissions on /var/spool/up2date/loginAuth.pkl, enabling local users to access the Red Hat Network profile and potentially disrupt future updates. The iss...