CVE-2009-0788

Red Hat Network (RHN) Satellite Server 5.3 and 5.4 does not properly rewrite unspecified URLs, which allows remote attackers to (1) obtain unspecified sensitive host information or (2) use the server as an inadvertent proxy to connect to arbitrary services and IP addresses via unspecified vectors.

Score

CVSS 2.0 6.4 Medium

Status

Modified - secalert@redhat.com

Published

2011-04-18

Last modified

2024-08-07

Weaknesses

CWE-200

Affected products

• Network Satellite Server (Redhat)

References

• http://secunia.com/advisories/44150
• http://www.redhat.com/support/errata/RHSA-2011-0434.html
• http://www.securityfocus.com/bid/47316
• http://www.securitytracker.com/id?1025316
• http://www.vupen.com/english/advisories/2011/0967
• https://bugzilla.redhat.com/show_bug.cgi?id=491365
• https://exchange.xforce.ibmcloud.com/vulnerabilities/66691