CVE-2010-1171

Опубликовано: 18 апр. 2011

Источник: nvd

CVSS2: 5.5

EPSS Низкий

Описание

Red Hat Network (RHN) Satellite 5.3 and 5.4 exposes a dangerous, obsolete XML-RPC API, which allows remote authenticated users to access arbitrary files and cause a denial of service (failed yum operations) via vectors related to configuration and package group (comps.xml) files for channels.

Ссылки

http://secunia.com/advisories/44150
Not Applicable
http://www.redhat.com/support/errata/RHSA-2011-0434.html
Not Applicable
http://www.securityfocus.com/bid/47316
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id?1025316
Third Party Advisory
VDB Entry
http://www.vupen.com/english/advisories/2011/0967
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=584118
Issue Tracking
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/66690
Third Party Advisory
VDB Entry
http://secunia.com/advisories/44150
Not Applicable
http://www.redhat.com/support/errata/RHSA-2011-0434.html
Not Applicable
http://www.securityfocus.com/bid/47316
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id?1025316
Third Party Advisory
VDB Entry
http://www.vupen.com/english/advisories/2011/0967
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=584118
Issue Tracking
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/66690
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:redhat:satellite:5.3:*:*:*:*:*:*:*

cpe:2.3:a:redhat:satellite:5.4:*:*:*:*:*:*:*

EPSS

Процентиль: 76%

0.00958

Низкий

5.5 Medium

CVSS2

Дефекты

CWE-264

Связанные уязвимости

CVE-2010-1171

redhat

почти 15 лет назад

GHSA-qv7v-mjjg-mhxh

github

почти 4 года назад