Red Hat Security AdvisoryRHSA-2011:0434
security update for Red Hat Network Satellite
Released 2011-04-11 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Satellite 5.3 (RHEL v.4) spacewalk-backend-0.5.28-59.2.el4sat, spacewalk-backend-app-0.5.28-59.2.el4sat, spacewalk-backend-applet-0.5.28-59.2.el4sat +14
- Red Hat Satellite 5.3 (RHEL v.5) spacewalk-backend-0.5.28-59.2.el5sat, spacewalk-backend-app-0.5.28-59.2.el5sat, spacewalk-backend-applet-0.5.28-59.2.el5sat +14
- Red Hat Satellite 5.4 (RHEL v.5) spacewalk-backend-1.2.13-37.el5sat, spacewalk-backend-app-1.2.13-37.el5sat, spacewalk-backend-applet-1.2.13-37.el5sat +16
Fixes 2 records
Priority LOW 32
Red Hat Network (RHN) Satellite Server 5.3 and 5.4 does not properly rewrite unspecified URLs, which allows remote attackers to (1) obtain unspecified sensitive host information or (2) use the server as an inadvertent pr…
CVSS 2.0MEDIUM 6.4· Network · No auth · Interaction — · EPSS 0.01708 · Published 2011-04-18 · Fixed CWE-200
Priority LOW 30
Red Hat Network (RHN) Satellite 5.3 and 5.4 exposes a dangerous, obsolete XML-RPC API, which allows remote authenticated users to access arbitrary files and cause a denial of service (failed yum operations) via vectors r…
CVSS 2.0MEDIUM 5.5· Network · Low privileges · Interaction — · EPSS 0.02812 · Published 2011-04-18 · Fixed CWE-264
