CVE-2009-0788

RHN Satellite (Red Hat Network Satellite) on RHEL 5.3/5.4 is affected by CVE-2009-0788 due to improper rewriting of certain URLs, enabling an unauthenticated attacker to obtain sensitive host information or misuse the server as a proxy to reach arbitrary services/IPs. Red Hat’s RHSA-2011:0434 doc...

CVE-2010-1171

CVE-2010-1171 affects Red Hat Network Satellite (RHN Satellite) 5.3 and 5.4. The vulnerability stems from an obsolete XML-RPC API exposed by RHN Satellite, enabling an authenticated user to access arbitrary files and trigger a denial of service via manipulation of configuration and package group ...

CVE-2010-1171

Red Hat Network RHN Satellite 5.3 and 5.4 exposes a dangerous, obsolete XML-RPC API, which allows remote authenticated users to access arbitrary files and cause a denial of service failed yum operations via vectors related to configuration and package group comps.xml files for channels...

PT-2011-1298

Name of the Vulnerable Software and Affected Versions Red Hat Network RHN Satellite Server versions 5.3 through 5.4 Description The issue allows remote attackers to obtain sensitive host information or use the server as a proxy to connect to arbitrary services and IP addresses. Recommendations Fo...

CVE-2010-1171: Undefined Security Weakness

Red Hat Network RHN Satellite 5.3 and 5.4 exposes a dangerous, obsolete XML-RPC API, which allows remote authenticated users to access arbitrary files and cause a denial of service failed yum operations via vectors related to configuration and package group comps.xml files for channels...

CVE-2009-0788: Exposure of Sensitive Information to an Unauthorized Actor

Red Hat Network RHN Satellite Server 5.3 and 5.4 does not properly rewrite unspecified URLs, which allows remote attackers to 1 obtain unspecified sensitive host information or 2 use the server as an inadvertent proxy to connect to arbitrary services and IP addresses via unspecified vectors...

CVE-2011-0717

Session fixation vulnerability in Red Hat Network RHN Satellite Server 5.4 allows remote attackers to hijack web sessions via unspecified vectors related to Spacewalk...

Session fixation

Session fixation vulnerability in Red Hat Network RHN Satellite Server 5.4 allows remote attackers to hijack web sessions via unspecified vectors related to Spacewalk...

CVE-2011-0717

Session fixation vulnerability in Red Hat Network RHN Satellite Server 5.4 allows remote attackers to hijack web sessions via unspecified vectors related to Spacewalk...

CVE-2011-0717

The CVE-2011-0717 issue affects Red Hat Network Satellite Server 5.4 (Spacewalk-related). The root cause is a session fixation flaw where session cookies can be manipulated, enabling an attacker to hijack a user’s session after login. Documented impact includes potential partial disclosure/integr...

CVE-2011-0718

The CVE-2011-0718 issue affects Red Hat Network Satellite Server 5.4, where no time delay is enforced after a failed login, enabling potential brute‑force password guessing from remote attackers. Connected sources confirm this is addressed by the Red Hat advisory RHSA-2011:0300, which provides up...

CVE-2011-0718

Red Hat Network RHN Satellite Server 5.4 does not use a time delay after a failed login attempt, which makes it easier for remote attackers to conduct brute force password guessing attacks...

CVE-2011-0717: Undefined Security Weakness

Session fixation vulnerability in Red Hat Network RHN Satellite Server 5.4 allows remote attackers to hijack web sessions via unspecified vectors related to Spacewalk...

CVE-2011-0718: Improper Authentication

Red Hat Network RHN Satellite Server 5.4 does not use a time delay after a failed login attempt, which makes it easier for remote attackers to conduct brute force password guessing attacks...

PT-2011-2582

Name of the Vulnerable Software and Affected Versions Red Hat Network RHN Satellite Server version 5.4 Description The issue allows remote attackers to conduct brute force password guessing attacks more easily due to the lack of a time delay after a failed login attempt. Recommendations For Red H...

Moderate: Red Hat Security Advisory: Red Hat Network Satellite Server security update

Updated packages that fix two security issues are now available for Red Hat Network Satellite Server 5.4. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

RHEL 3 / 4 : redhat-release (EOL Notice) (RHSA-2011:0001)

This is the End Of Life notification for RHN Satellite Server 4. On December 31st, 2010, per the life cycle support policy, the version 4 series of Satellite and Proxy products exited Production Phase 2 marking the end of their support by Red Hat. Please reference the support policy here :...

(RHSA-2011:0001) Low: RHN Satellite Server 4 - End Of Life

On December 31st, 2010, per the life-cycle support policy, the version 4 series of Satellite and Proxy products exited Production Phase 2 marking the end of their support by Red Hat. Please reference the support policy here: https://access.redhat.com/support/policy/updates/satellite/ Though we ar...

CVE-2010-1439

CVE-2010-1439 affects yum-rhn-plugin in Red Hat Network Client Tools (rhn-client-tools) on RHEL5 and Fedora. The root cause is world-readable permissions on /var/spool/up2date/loginAuth.pkl, enabling local users to access the Red Hat Network profile and potentially disrupt future updates. The iss...

CVE-2010-1439: Undefined Security Weakness

yum-rhn-plugin in Red Hat Network Client Tools aka rhn-client-tools on Red Hat Enterprise Linux RHEL 5 and Fedora uses world-readable permissions for the /var/spool/up2date/loginAuth.pkl file, which allows local users to access the Red Hat Network profile, and possibly prevent future security...