Red Hat Network Satellite Server Multiple Security Bypass Vulnerabilities
BID:46528
Info
Red Hat Network Satellite Server Multiple Security Bypass Vulnerabilities
| Bugtraq ID: | 46528 |
| Class: | Access Validation Error |
| CVE: |
CVE-2011-0717 CVE-2011-0718 |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 23 2011 12:00AM |
| Updated: | Feb 23 2011 12:00AM |
| Credit: | Thomas Biege |
| Vulnerable: |
Red Hat Red Hat Network Satellite Server 5.4 Red Hat Network Satellite Server (for RHEL 5) 5.4 |
| Not Vulnerable: | |
Discussion
Red Hat Network Satellite Server Multiple Security Bypass Vulnerabilities
Red Hat Network Satellite Server is prone to multiple security-bypass vulnerabilities.
Attackers can exploit these issues to bypass security restrictions, guess passwords, and obtain potentially sensitive information; other attacks may also be possible.
Red Hat Network Satellite Server is prone to multiple security-bypass vulnerabilities.
Attackers can exploit these issues to bypass security restrictions, guess passwords, and obtain potentially sensitive information; other attacks may also be possible.
Exploit / POC
Red Hat Network Satellite Server Multiple Security Bypass Vulnerabilities
An attacker can exploit this issue via readily available tools.
An attacker can exploit this issue via readily available tools.
Solution / Fix
Red Hat Network Satellite Server Multiple Security Bypass Vulnerabilities
Solution:
Updates are available. Please see the reference for more information.
Solution:
Updates are available. Please see the reference for more information.
References
Red Hat Network Satellite Server Multiple Security Bypass Vulnerabilities
References:
References:
- About RHN (Red Hat)
- CVE-2011-0717 Satellite, Spacewalk: Session fixation flaw (Red Hat Bugzilla )
- CVE-2011-0718 Satellite, Spacewalk: Prone to brute force password guessing attac (Red Hat Bugzilla )