PT-2011-2582 · Red Hat · Red Hat Network Satellite Server

Published 2011-02-25 · Updated 2017-08-17 · CVE-2011-0718

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Red Hat Network (RHN) Satellite Server version 5.4

Description The issue allows remote attackers to conduct brute force password guessing attacks more easily due to the lack of a time delay after a failed login attempt.

Recommendations For Red Hat Network (RHN) Satellite Server version 5.4, consider implementing a time delay after a failed login attempt to mitigate the risk of brute force password guessing attacks.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2011-0718

RHSA-2011:0300

Affected Products

Red Hat Network Satellite Server

References · 8

• http://vupen.com/english/advisories/2011/0491 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2011-0300.html · Vendor Advisory
• http://secunia.com/advisories/43487 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-0718 · Security Note
• http://securitytracker.com/id?1025116 · Note
• http://securityfocus.com/bid/46528 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/65657 · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=672159 · Note