PT-2011-1298 · Red Hat · Red Hat Network Satellite Server

Jan Lieskovsky · Publicado 2011-04-18 · Atualizado 2017-08-17 · CVE-2009-0788

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Red Hat Network (RHN) Satellite Server versions 5.3 through 5.4

Description The issue allows remote attackers to obtain sensitive host information or use the server as a proxy to connect to arbitrary services and IP addresses.

Recommendations For versions 5.3 through 5.4, update the URL rewriting mechanism to properly handle unspecified URLs and prevent unauthorized access.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2009-0788

RHSA-2011:0434

Produtos afetados

Red Hat Network Satellite Server

Referências · 8

• https://nvd.nist.gov/vuln/detail/CVE-2009-0788 · Nota de Segurança
• http://redhat.com/support/errata/RHSA-2011-0434.html · Aviso do Fabricante
• http://secunia.com/advisories/44150 · Aviso do Fabricante
• http://securitytracker.com/id?1025316 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/66691 · Nota
• http://vupen.com/english/advisories/2011/0967 · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=491365 · Nota
• http://securityfocus.com/bid/47316 · Nota