Authentication Bypass

spacewalk-config is vulnerable to authentication bypass. The vulnerability exists as a flaw was found in the way RHN Satellite rewrote certain URLs. An unauthenticated user could use a specially-crafted HTTP request to obtain sensitive information about the host system RHN Satellite was running on. They could also use RHN Satellite as a distributed denial of service tool, forcing it to connect to an arbitrary service at an arbitrary IP address via a specially-crafted HTTP request.