CVE-2012-1145
Fixed in a distro release EPSS 3%
spacewalk-backend in Red Hat Network Satellite 5.4 on Red Hat Enterprise Linux 6 does not properly authorize or authenticate uploads to the NULL organization when mod_wsgi is used, which allows remote attackers to cause a denial of service (/var partition disk consumption and failed updates) via a large number of package uploads.
Products: redhat satellite
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat network satellite 5.4 | spacewalk-backend | 0:1.2.13-66.1.el6sat |
| Red Hat network satellite 5.4 | spacewalk-backend-app | 0:1.2.13-66.1.el6sat |
| Red Hat network satellite 5.4 | spacewalk-backend-applet | 0:1.2.13-66.1.el6sat |
| Red Hat network satellite 5.4 | spacewalk-backend-config-files | 0:1.2.13-66.1.el6sat |
| Red Hat network satellite 5.4 | spacewalk-backend-config-files-common | 0:1.2.13-66.1.el6sat |
| Red Hat network satellite 5.4 | spacewalk-backend-config-files-tool | 0:1.2.13-66.1.el6sat |
| Red Hat network satellite 5.4 | spacewalk-backend-iss | 0:1.2.13-66.1.el6sat |
| Red Hat network satellite 5.4 | spacewalk-backend-iss-export | 0:1.2.13-66.1.el6sat |
| Red Hat network satellite 5.4 | spacewalk-backend-libs | 0:1.2.13-66.1.el6sat |
| Red Hat network satellite 5.4 | spacewalk-backend-package-push-server | 0:1.2.13-66.1.el6sat |
| Red Hat network satellite 5.4 | spacewalk-backend-server | 0:1.2.13-66.1.el6sat |
| Red Hat network satellite 5.4 | spacewalk-backend-sql | 0:1.2.13-66.1.el6sat |
| Red Hat network satellite 5.4 | spacewalk-backend-sql-oracle | 0:1.2.13-66.1.el6sat |
| Red Hat network satellite 5.4 | spacewalk-backend-tools | 0:1.2.13-66.1.el6sat |
| Red Hat network satellite 5.4 | spacewalk-backend-upload-server | 0:1.2.13-66.1.el6sat |
| Red Hat network satellite 5.4 | spacewalk-backend-xml-export-libs | 0:1.2.13-66.1.el6sat |
| Red Hat network satellite 5.4 | spacewalk-backend-xmlrpc | 0:1.2.13-66.1.el6sat |
| Red Hat network satellite 5.4 | spacewalk-backend-xp | 0:1.2.13-66.1.el6sat |