Lucene search

RedhatCVE-2010-1171

HistoryApr 18, 2011 - 5:55 p.m.

CVE-2010-1171

2011-04-1817:55:00

CWE-264

redhat

web.nvd.nist.gov

red hat

rhn satellite

cve-2010-1171

xml-rpc

api

vulnerability

nvd

security

configuration

package group

denial of service

CVSS2

5.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:N/A:P

AI Score

6.7

Confidence

Low

EPSS

0.007

Percentile

79.6%

JSON

Red Hat Network (RHN) Satellite 5.3 and 5.4 exposes a dangerous, obsolete XML-RPC API, which allows remote authenticated users to access arbitrary files and cause a denial of service (failed yum operations) via vectors related to configuration and package group (comps.xml) files for channels.

Affected configurations

Nvd

Node

redhatsatelliteMatch5.3

redhatsatelliteMatch5.4

VendorProductVersionCPE
redhatsatellite5.3cpe:2.3:a:redhat:satellite:5.3:*:*:*:*:*:*:*
redhatsatellite5.4cpe:2.3:a:redhat:satellite:5.4:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
redhat	satellite	5.3	cpe:2.3:a:redhat:satellite:5.3:::::::*
redhat	satellite	5.4	cpe:2.3:a:redhat:satellite:5.4:::::::*

References

secunia.com/advisories/44150

www.redhat.com/support/errata/RHSA-2011-0434.html

www.securityfocus.com/bid/47316

www.securitytracker.com/id?1025316

www.vupen.com/english/advisories/2011/0967

bugzilla.redhat.com/show_bug.cgi?id=584118

exchange.xforce.ibmcloud.com/vulnerabilities/66690

CVSS2

5.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:N/A:P

AI Score

6.7

Confidence

Low

EPSS

0.007

Percentile

79.6%

JSON

Related for CVE-2010-1171