CVE-2010-1171
Fixed in a distro release EPSS 3%
Red Hat Network (RHN) Satellite 5.3 and 5.4 exposes a dangerous, obsolete XML-RPC API, which allows remote authenticated users to access arbitrary files and cause a denial of service (failed yum operations) via vectors related to configuration and package group (comps.xml) files for channels.
Products: redhat satellite
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat network satellite 5.3 | spacewalk-backend | 0:0.5.28-59.2.el4sat |
| Red Hat network satellite 5.3 | spacewalk-backend | 0:0.5.28-59.2.el5sat |
| Red Hat network satellite 5.3 | spacewalk-backend-app | 0:0.5.28-59.2.el4sat |
| Red Hat network satellite 5.3 | spacewalk-backend-app | 0:0.5.28-59.2.el5sat |
| Red Hat network satellite 5.3 | spacewalk-backend-applet | 0:0.5.28-59.2.el4sat |
| Red Hat network satellite 5.3 | spacewalk-backend-applet | 0:0.5.28-59.2.el5sat |
| Red Hat network satellite 5.3 | spacewalk-backend-config-files | 0:0.5.28-59.2.el4sat |
| Red Hat network satellite 5.3 | spacewalk-backend-config-files | 0:0.5.28-59.2.el5sat |
| Red Hat network satellite 5.3 | spacewalk-backend-config-files-common | 0:0.5.28-59.2.el4sat |
| Red Hat network satellite 5.3 | spacewalk-backend-config-files-common | 0:0.5.28-59.2.el5sat |
| Red Hat network satellite 5.3 | spacewalk-backend-config-files-tool | 0:0.5.28-59.2.el4sat |
| Red Hat network satellite 5.3 | spacewalk-backend-config-files-tool | 0:0.5.28-59.2.el5sat |
| Red Hat network satellite 5.3 | spacewalk-backend-iss | 0:0.5.28-59.2.el4sat |
| Red Hat network satellite 5.3 | spacewalk-backend-iss | 0:0.5.28-59.2.el5sat |
| Red Hat network satellite 5.3 | spacewalk-backend-iss-export | 0:0.5.28-59.2.el5sat |
| Red Hat network satellite 5.3 | spacewalk-backend-iss-export | 0:0.5.28-59.2.el4sat |
| Red Hat network satellite 5.3 | spacewalk-backend-package-push-server | 0:0.5.28-59.2.el4sat |
| Red Hat network satellite 5.3 | spacewalk-backend-package-push-server | 0:0.5.28-59.2.el5sat |
| Red Hat network satellite 5.3 | spacewalk-backend-server | 0:0.5.28-59.2.el5sat |
| Red Hat network satellite 5.3 | spacewalk-backend-server | 0:0.5.28-59.2.el4sat |
| Red Hat network satellite 5.3 | spacewalk-backend-sql | 0:0.5.28-59.2.el4sat |
| Red Hat network satellite 5.3 | spacewalk-backend-sql | 0:0.5.28-59.2.el5sat |
| Red Hat network satellite 5.3 | spacewalk-backend-tools | 0:0.5.28-59.2.el4sat |
| Red Hat network satellite 5.3 | spacewalk-backend-tools | 0:0.5.28-59.2.el5sat |
| Red Hat network satellite 5.3 | spacewalk-backend-upload-server | 0:0.5.28-59.2.el4sat |
| Red Hat network satellite 5.3 | spacewalk-backend-upload-server | 0:0.5.28-59.2.el5sat |
| Red Hat network satellite 5.3 | spacewalk-backend-xml-export-libs | 0:0.5.28-59.2.el4sat |
| Red Hat network satellite 5.3 | spacewalk-backend-xml-export-libs | 0:0.5.28-59.2.el5sat |
| Red Hat network satellite 5.3 | spacewalk-backend-xmlrpc | 0:0.5.28-59.2.el4sat |
| Red Hat network satellite 5.3 | spacewalk-backend-xmlrpc | 0:0.5.28-59.2.el5sat |
| Red Hat network satellite 5.3 | spacewalk-backend-xp | 0:0.5.28-59.2.el4sat |
| Red Hat network satellite 5.3 | spacewalk-backend-xp | 0:0.5.28-59.2.el5sat |
| Red Hat network satellite 5.3 | spacewalk-config | 0:0.5.9-16.el4sat |
| Red Hat network satellite 5.3 | spacewalk-config | 0:0.5.9-16.el5sat |
| Red Hat network satellite 5.4 | spacewalk-backend | 0:1.2.13-37.el5sat |
| Red Hat network satellite 5.4 | spacewalk-backend-app | 0:1.2.13-37.el5sat |
| Red Hat network satellite 5.4 | spacewalk-backend-applet | 0:1.2.13-37.el5sat |
| Red Hat network satellite 5.4 | spacewalk-backend-config-files | 0:1.2.13-37.el5sat |
| Red Hat network satellite 5.4 | spacewalk-backend-config-files-common | 0:1.2.13-37.el5sat |
| Red Hat network satellite 5.4 | spacewalk-backend-config-files-tool | 0:1.2.13-37.el5sat |
| Red Hat network satellite 5.4 | spacewalk-backend-iss | 0:1.2.13-37.el5sat |
| Red Hat network satellite 5.4 | spacewalk-backend-iss-export | 0:1.2.13-37.el5sat |
| Red Hat network satellite 5.4 | spacewalk-backend-libs | 0:1.2.13-37.el5sat |
| Red Hat network satellite 5.4 | spacewalk-backend-package-push-server | 0:1.2.13-37.el5sat |
| Red Hat network satellite 5.4 | spacewalk-backend-server | 0:1.2.13-37.el5sat |
| Red Hat network satellite 5.4 | spacewalk-backend-sql | 0:1.2.13-37.el5sat |
| Red Hat network satellite 5.4 | spacewalk-backend-sql-oracle | 0:1.2.13-37.el5sat |
| Red Hat network satellite 5.4 | spacewalk-backend-tools | 0:1.2.13-37.el5sat |
| Red Hat network satellite 5.4 | spacewalk-backend-upload-server | 0:1.2.13-37.el5sat |
| Red Hat network satellite 5.4 | spacewalk-backend-xml-export-libs | 0:1.2.13-37.el5sat |
| Red Hat network satellite 5.4 | spacewalk-backend-xmlrpc | 0:1.2.13-37.el5sat |
| Red Hat network satellite 5.4 | spacewalk-backend-xp | 0:1.2.13-37.el5sat |
| Red Hat network satellite 5.4 | spacewalk-config | 0:1.2.2-2.el5sat |