CVE-2007-5961
Fixed in a distro release EPSS 1%
Cross-site scripting (XSS) vulnerability in the Red Hat Network channel search feature, as used in RHN and Red Hat Network Satellite before 5.0.2, allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
Products: redhat network_satellite
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat network satellite 5.0 el4 | jabberd | 0:2.0s10-3.38.rhn |
| Red Hat network satellite 5.0 el4 | java-1.4.2-ibm | 0:1.4.2.10-1jpp.2.el4 |
| Red Hat network satellite 5.0 el4 | java-1.4.2-ibm-devel | 0:1.4.2.10-1jpp.2.el4 |
| Red Hat network satellite 5.0 el4 | jfreechart | 0:0.9.20-3.rhn |
| Red Hat network satellite 5.0 el4 | openmotif21 | 0:2.1.30-11.RHEL4.6 |
| Red Hat network satellite 5.0 el4 | openmotif21-debuginfo | 0:2.1.30-11.RHEL4.6 |
| Red Hat network satellite 5.0 el4 | perl-Crypt-CBC | 0:2.24-1.el4 |
| Red Hat network satellite 5.0 el4 | rhn-apache | 0:1.3.27-36.rhn.rhel4 |
| Red Hat network satellite 5.0 el4 | rhn-modjk-ap13 | 0:1.2.23-2rhn.rhel4 |
| Red Hat network satellite 5.0 el4 | rhn-modperl | 0:1.29-16.rhel4 |
| Red Hat network satellite 5.0 el4 | rhn-modssl | 0:2.8.12-8.rhn.10.rhel4 |
| Red Hat network satellite 5.0 el4 | tomcat5 | 0:5.0.30-0jpp_10rh |