PT-2011-1298 · Red Hat · Red Hat Network Satellite Server

Jan Lieskovsky · Published 2011-04-18 · Updated 2017-08-17 · CVE-2009-0788

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Red Hat Network (RHN) Satellite Server versions 5.3 through 5.4

Description The issue allows remote attackers to obtain sensitive host information or use the server as a proxy to connect to arbitrary services and IP addresses.

Recommendations For versions 5.3 through 5.4, update the URL rewriting mechanism to properly handle unspecified URLs and prevent unauthorized access.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2009-0788

RHSA-2011:0434

Affected Products

Red Hat Network Satellite Server

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2009-0788 · Security Note
• http://redhat.com/support/errata/RHSA-2011-0434.html · Vendor Advisory
• http://secunia.com/advisories/44150 · Vendor Advisory
• http://vupen.com/english/advisories/2011/0967 · Vendor Advisory
• http://securitytracker.com/id?1025316 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/66691 · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=491365 · Note
• http://securityfocus.com/bid/47316 · Note