PT-2008-2507 · Red Hat · Red Hat Administration Server

Richard Megginson + 1 · Publicado 2008-04-16 · Atualizado 2017-08-08 · CVE-2008-0893

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Red Hat Administration Server versions 8.0 EL4 and EL5

Description The issue is related to improper access restriction to CGI scripts, allowing remote attackers to perform administrative actions.

Recommendations For Red Hat Administration Server versions 8.0 EL4 and EL5, restrict access to CGI scripts to prevent unauthorized administrative actions.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2008-0893

RHSA-2008:0201

Produtos afetados

Red Hat Administration Server

Referências · 10

• http://secunia.com/advisories/29761 · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=437320 · Nota
• http://securityfocus.com/bid/28802 · Nota
• http://secunia.com/advisories/29826 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41843 · Nota
• http://redhat.com/support/errata/RHSA-2008-0201.html · Correção, Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2008-0893 · Nota de Segurança
• https://redhat.com/archives/fedora-package-announce/2008-April/msg00380.html · Aviso do Fabricante
• http://securitytracker.com/id?1019857 · Nota
• https://redhat.com/archives/fedora-package-announce/2008-April/msg00386.html · Aviso do Fabricante