Rpath

Records13All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

Rpath records in CISA KEV

No Rpath vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Rpath Linux 6 records MEDIUM Appliance Platform Agent 3 records MEDIUM Linux 2 records MEDIUM Initscripts 1 record LOW Rmake 1 record LOW

Records

3 records in Appliance Platform Agent · all components

TI-2007-05701 CVE-2007-5962 · GHSA-67jj-2hgw-486p

Memory leak in a certain Red Hat patch, applied to vsftpd 2.0.5 on Red Hat Enterprise…

MEDIUM 45

Memory leak in a certain Red Hat patch, applied to vsftpd 2.0.5 on Red Hat Enterprise Linux (RHEL) 5 and Fedora 6 through 8, and on Foresight Linux and rPath appliances, allows remote attackers to cause a denial of servi…

CVSS 2.0HIGH 7.1 Network No auth Interaction — EPSS 0.12061 Published 2008-05-22 Fixed CWE-399

TI-2008-02058 CVE-2008-2139 · GHSA-cgf3-fprj-h5p7

The rootpw plugin in rPath Appliance Platform Agent 2 and 3 does not re-validate requests…

LOW 29

The rootpw plugin in rPath Appliance Platform Agent 2 and 3 does not re-validate requests from a browser with a valid administrator session, including requests to change the password, which makes it easier for physically…

CVSS 2.0MEDIUM 6.5 Adjacent network Low privileges Interaction — EPSS 0.00362 Published 2008-05-12 No fix listed CWE-264

TI-2008-02059 CVE-2008-2140 · GHSA-f442-5f2r-m4gr

Cross-site request forgery (CSRF) vulnerability in the rootpw plugin in rPath Appliance…

LOW 13

Cross-site request forgery (CSRF) vulnerability in the rootpw plugin in rPath Appliance Platform Agent 2 and 3 allows remote attackers to reset the root password as the administrator via a crafted URL.

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.00412 Published 2008-05-12 No fix listed CWE-352

Open these records in search →

Critical	1
High	4
Medium	6
Low	2
No CVSS	0