PT-2013-1497 · Suse · Webyast

Publicado 2013-01-26 · Atualizado 2013-01-28 · CVE-2012-0435

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions SUSE WebYaST versions prior to 1.2 0.2.63-0.6.1

Description The issue allows remote attackers to modify the hosts list and subsequently conduct man-in-the-middle attacks via a crafted request on TCP port 4984 to the /host endpoint.

Recommendations For versions prior to 1.2 0.2.63-0.6.1, update to version 1.2 0.2.63-0.6.1 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2012-0435

Produtos afetados

Webyast

Referências · 5

• https://bugzilla.novell.com/show_bug.cgi?id=792712 · Nota
• http://support.novell.com/security/cve/CVE-2012-0435.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-0435 · Nota de Segurança
• http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00008.html · Aviso do Fabricante
• http://kb.cert.org/vuls/id/806908 · Nota