PT-2011-2582 · Red Hat · Red Hat Network Satellite Server

Publicado 2011-02-25 · Atualizado 2017-08-17 · CVE-2011-0718

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Red Hat Network (RHN) Satellite Server version 5.4

Description The issue allows remote attackers to conduct brute force password guessing attacks more easily due to the lack of a time delay after a failed login attempt.

Recommendations For Red Hat Network (RHN) Satellite Server version 5.4, consider implementing a time delay after a failed login attempt to mitigate the risk of brute force password guessing attacks.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2011-0718

RHSA-2011:0300

Produtos afetados

Red Hat Network Satellite Server

Referências · 8

• http://securitytracker.com/id?1025116 · Nota
• http://securityfocus.com/bid/46528 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/65657 · Nota
• http://vupen.com/english/advisories/2011/0491 · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=672159 · Nota
• http://redhat.com/support/errata/RHSA-2011-0300.html · Aviso do Fabricante
• http://secunia.com/advisories/43487 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2011-0718 · Nota de Segurança