< Back to JetLib.com

jetlib.sec » Tags » red-hat-network

« Expand/Collapse

37 items tagged "red hat network"

Related tags: security [+], satellite [+], public internet access [+], advisory [+], user [+], secunia [+], satellite user [+], network content [+], linux deployments [+], authentication credentials [+], satellite server [+], network satellite [+], server [+], rpm [+], package management system [+], package [+], network [+], java runtime environment [+], java 2 runtime environment [+], red [+], hat [+], security restrictions [+], network proxy [+], malicious users [+], red hat security [+]

March 29, 2012
20:34
Secunia Security Advisory 48664
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - A vulnerability has been reported in Red Hat Network Satellite, which can be exploited by malicious people to bypass certain security restrictions.
Tags: red-hat-network network-satellite security-restrictions
16:51
Red Hat Security Advisory 2012-0436-01
» ‎ Packet Storm Security Advisories

Red Hat Security Advisory 2012-0436-01 - Red Hat Network Satellite is a systems management tool for Linux-based infrastructures. It allows for provisioning, monitoring, and remote management of multiple Linux deployments with a single, centralized tool. It was found that a remote attacker could upload packages to an RHN Satellite server's NULL organization without any authorization or authentication. Although an attacker cannot put packages into an arbitrary channel and have client systems download them, they could use the flaw to consume all the free space in the partition used to store synced packages. With no free space, Satellite would be unable to download updates and new packages, preventing client systems from obtaining them.
Tags: hat red satellite red-hat-network linux-deployments red-hat-security

16:51
Red Hat Security Advisory 2012-0436-01
» ‎ Packet Storm Security Recent Files

Red Hat Security Advisory 2012-0436-01 - Red Hat Network Satellite is a systems management tool for Linux-based infrastructures. It allows for provisioning, monitoring, and remote management of multiple Linux deployments with a single, centralized tool. It was found that a remote attacker could upload packages to an RHN Satellite server's NULL organization without any authorization or authentication. Although an attacker cannot put packages into an arbitrary channel and have client systems download them, they could use the flaw to consume all the free space in the partition used to store synced packages. With no free space, Satellite would be unable to download updates and new packages, preventing client systems from obtaining them.
Tags: hat red satellite red-hat-network linux-deployments red-hat-security

16:51
Red Hat Security Advisory 2012-0436-01
» ‎ Packet Storm Security Misc. Files

Red Hat Security Advisory 2012-0436-01 - Red Hat Network Satellite is a systems management tool for Linux-based infrastructures. It allows for provisioning, monitoring, and remote management of multiple Linux deployments with a single, centralized tool. It was found that a remote attacker could upload packages to an RHN Satellite server's NULL organization without any authorization or authentication. Although an attacker cannot put packages into an arbitrary channel and have client systems download them, they could use the flaw to consume all the free space in the partition used to store synced packages. With no free space, Satellite would be unable to download updates and new packages, preventing client systems from obtaining them.
Tags: hat red satellite red-hat-network linux-deployments red-hat-security

February 21, 2012
7:39
Red Hat Security Advisory 2012-0153-03
» ‎ Packet Storm Security Advisories

Red Hat Security Advisory 2012-0153-03 - Sos is a set of tools that gather information about system hardware and configuration. The sosreport utility incorrectly included Certificate-based Red Hat Network private entitlement keys in the resulting archive of debugging information. An attacker able to access the archive could use the keys to access Red Hat Network content available to the host. This issue did not affect users of Red Hat Network Classic. This updated sos package also includes numerous bug fixes and enhancements.
Tags: hat network red red-hat-network red-hat-security network-content

7:39
Red Hat Security Advisory 2012-0153-03
» ‎ Packet Storm Security Recent Files

Red Hat Security Advisory 2012-0153-03 - Sos is a set of tools that gather information about system hardware and configuration. The sosreport utility incorrectly included Certificate-based Red Hat Network private entitlement keys in the resulting archive of debugging information. An attacker able to access the archive could use the keys to access Red Hat Network content available to the host. This issue did not affect users of Red Hat Network Classic. This updated sos package also includes numerous bug fixes and enhancements.
Tags: hat network red red-hat-network red-hat-security network-content

7:39
Red Hat Security Advisory 2012-0153-03
» ‎ Packet Storm Security Misc. Files

Red Hat Security Advisory 2012-0153-03 - Sos is a set of tools that gather information about system hardware and configuration. The sosreport utility incorrectly included Certificate-based Red Hat Network private entitlement keys in the resulting archive of debugging information. An attacker able to access the archive could use the keys to access Red Hat Network content available to the host. This issue did not affect users of Red Hat Network Classic. This updated sos package also includes numerous bug fixes and enhancements.
Tags: hat network red red-hat-network red-hat-security network-content

February 07, 2012
23:37
Secunia Security Advisory 47905
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Red Hat has issued an update for Red Hat Network Satellite Server. This fixes a weakness, which can be exploited by malicious users to disclose certain sensitive information.
Tags: advisory secunia security red-hat-network satellite-server network-satellite
23:37
Secunia Security Advisory 47906
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Red Hat has issued an update for Red Hat Network Proxy. This fixes a weakness, which can be exploited by malicious users to disclose certain sensitive information.
Tags: advisory secunia security red-hat-network network-proxy malicious-users
February 06, 2012
16:13
Red Hat Security Advisory 2012-0101-01
» ‎ Packet Storm Security Advisories

Red Hat Security Advisory 2012-0101-01 - Red Hat Network Satellite is a systems management tool for Linux-based infrastructures. It allows for provisioning, monitoring, and remote management of multiple Linux deployments with a single, centralized tool. If a user submitted a system registration XML-RPC call to an RHN Satellite server and that call failed, their RHN user password was included in plain text in the error messages both stored in the server log and mailed to the server administrator. With this update, user passwords are excluded from these error messages to avoid the exposure of authentication credentials.
Tags: user hat red red-hat-network linux-deployments authentication-credentials

16:13
Red Hat Security Advisory 2012-0101-01
» ‎ Packet Storm Security Recent Files

Red Hat Security Advisory 2012-0101-01 - Red Hat Network Satellite is a systems management tool for Linux-based infrastructures. It allows for provisioning, monitoring, and remote management of multiple Linux deployments with a single, centralized tool. If a user submitted a system registration XML-RPC call to an RHN Satellite server and that call failed, their RHN user password was included in plain text in the error messages both stored in the server log and mailed to the server administrator. With this update, user passwords are excluded from these error messages to avoid the exposure of authentication credentials.
Tags: user hat red red-hat-network linux-deployments authentication-credentials

16:13
Red Hat Security Advisory 2012-0101-01
» ‎ Packet Storm Security Misc. Files

Red Hat Security Advisory 2012-0101-01 - Red Hat Network Satellite is a systems management tool for Linux-based infrastructures. It allows for provisioning, monitoring, and remote management of multiple Linux deployments with a single, centralized tool. If a user submitted a system registration XML-RPC call to an RHN Satellite server and that call failed, their RHN user password was included in plain text in the error messages both stored in the server log and mailed to the server administrator. With this update, user passwords are excluded from these error messages to avoid the exposure of authentication credentials.
Tags: user hat red red-hat-network linux-deployments authentication-credentials

16:10
Red Hat Security Advisory 2012-0102-01
» ‎ Packet Storm Security Advisories

Red Hat Security Advisory 2012-0102-01 - Red Hat Network Proxy provides a mechanism for caching content, such as package updates from Red Hat or custom content created for an organization on an internal, centrally-located server. If a user submitted a system registration XML-RPC call to an RHN Proxy server and that call failed, their RHN user password was included in plain text in the error messages both stored in the server log and mailed to the server administrator. With this update, user passwords are excluded from these error messages to avoid the exposure of authentication credentials.
Tags: server hat red red-hat-network red-hat-security authentication-credentials

16:10
Red Hat Security Advisory 2012-0102-01
» ‎ Packet Storm Security Recent Files

Red Hat Security Advisory 2012-0102-01 - Red Hat Network Proxy provides a mechanism for caching content, such as package updates from Red Hat or custom content created for an organization on an internal, centrally-located server. If a user submitted a system registration XML-RPC call to an RHN Proxy server and that call failed, their RHN user password was included in plain text in the error messages both stored in the server log and mailed to the server administrator. With this update, user passwords are excluded from these error messages to avoid the exposure of authentication credentials.
Tags: server hat red red-hat-network red-hat-security authentication-credentials

16:10
Red Hat Security Advisory 2012-0102-01
» ‎ Packet Storm Security Misc. Files

Red Hat Security Advisory 2012-0102-01 - Red Hat Network Proxy provides a mechanism for caching content, such as package updates from Red Hat or custom content created for an organization on an internal, centrally-located server. If a user submitted a system registration XML-RPC call to an RHN Proxy server and that call failed, their RHN user password was included in plain text in the error messages both stored in the server log and mailed to the server administrator. With this update, user passwords are excluded from these error messages to avoid the exposure of authentication credentials.
Tags: server hat red red-hat-network red-hat-security authentication-credentials

December 08, 2011
22:57
Secunia Security Advisory 47162
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - A vulnerability has been reported in Red Hat Network Satellite Server, which can be exploited by malicious users to conduct script insertion attacks.
Tags: advisory secunia security red-hat-network satellite-server network-satellite
December 07, 2011
19:58
Red Hat Security Advisory 2011-1794-01
» ‎ Packet Storm Security Advisories

Red Hat Security Advisory 2011-1794-01 - Red Hat Network Satellite provides a solution to organizations requiring absolute control over and privacy of the maintenance and package deployment of their servers. It allows organizations to utilize the benefits of the Red Hat Network without having to provide public Internet access to their servers or other client systems. A cross-site scripting flaw was found in the RHN Satellite web interface. An authenticated RHN Satellite user could use this flaw to perform a cross-site scripting attack against other authenticated users who are using the RHN Satellite web interface.
Tags: hat red satellite red-hat-network public-internet-access satellite-user

19:58
Red Hat Security Advisory 2011-1794-01
» ‎ Packet Storm Security Recent Files

Red Hat Security Advisory 2011-1794-01 - Red Hat Network Satellite provides a solution to organizations requiring absolute control over and privacy of the maintenance and package deployment of their servers. It allows organizations to utilize the benefits of the Red Hat Network without having to provide public Internet access to their servers or other client systems. A cross-site scripting flaw was found in the RHN Satellite web interface. An authenticated RHN Satellite user could use this flaw to perform a cross-site scripting attack against other authenticated users who are using the RHN Satellite web interface.
Tags: hat red satellite red-hat-network public-internet-access satellite-user

19:58
Red Hat Security Advisory 2011-1794-01
» ‎ Packet Storm Security Misc. Files

Red Hat Security Advisory 2011-1794-01 - Red Hat Network Satellite provides a solution to organizations requiring absolute control over and privacy of the maintenance and package deployment of their servers. It allows organizations to utilize the benefits of the Red Hat Network without having to provide public Internet access to their servers or other client systems. A cross-site scripting flaw was found in the RHN Satellite web interface. An authenticated RHN Satellite user could use this flaw to perform a cross-site scripting attack against other authenticated users who are using the RHN Satellite web interface.
Tags: hat red satellite red-hat-network public-internet-access satellite-user

December 06, 2011
15:54
Red Hat Security Advisory 2011-1536-03
» ‎ Packet Storm Security Advisories

Red Hat Security Advisory 2011-1536-03 - Sos is a set of tools that gather information about system hardware and configuration. The sosreport utility incorrectly included Certificate-based Red Hat Network private entitlement keys in the resulting archive of debugging information. An attacker able to access the archive could use the keys to access Red Hat Network content available to the host. This issue did not affect users of Red Hat Network Classic. This updated sos package also includes numerous bug fixes and enhancements. Space precludes documenting all of these changes in this advisory.
Tags: advisory hat red red-hat-network red-hat-security network-content

15:54
Red Hat Security Advisory 2011-1536-03
» ‎ Packet Storm Security Recent Files

Red Hat Security Advisory 2011-1536-03 - Sos is a set of tools that gather information about system hardware and configuration. The sosreport utility incorrectly included Certificate-based Red Hat Network private entitlement keys in the resulting archive of debugging information. An attacker able to access the archive could use the keys to access Red Hat Network content available to the host. This issue did not affect users of Red Hat Network Classic. This updated sos package also includes numerous bug fixes and enhancements. Space precludes documenting all of these changes in this advisory.
Tags: advisory hat red red-hat-network red-hat-security network-content

15:54
Red Hat Security Advisory 2011-1536-03
» ‎ Packet Storm Security Misc. Files

Red Hat Security Advisory 2011-1536-03 - Sos is a set of tools that gather information about system hardware and configuration. The sosreport utility incorrectly included Certificate-based Red Hat Network private entitlement keys in the resulting archive of debugging information. An attacker able to access the archive could use the keys to access Red Hat Network content available to the host. This issue did not affect users of Red Hat Network Classic. This updated sos package also includes numerous bug fixes and enhancements. Space precludes documenting all of these changes in this advisory.
Tags: advisory hat red red-hat-network red-hat-security network-content

November 15, 2011
0:33
Secunia Security Advisory 46056
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - A weakness and multiple vulnerabilities have been reported in Red Hat Network Satellite Server, which can be exploited by malicious people to conduct spoofing and cross-site scripting attacks.
Tags: advisory secunia security red-hat-network satellite-server network-satellite
October 03, 2011
9:22
Red Hat Security Advisory 2011-1349-01
» ‎ Packet Storm Security Advisories

Red Hat Security Advisory 2011-1349-01 - The RPM Package Manager is a command line driven package management system capable of installing, uninstalling, verifying, querying, and updating software packages. Multiple flaws were found in the way the RPM library parsed package headers. An attacker could create a specially-crafted RPM package that, when queried or installed, would cause rpm to crash or, potentially, execute arbitrary code. Note: Although an RPM package can, by design, execute arbitrary code when installed, this issue would allow a specially-crafted RPM package to execute arbitrary code before its digital signature has been verified. Package downloads from the Red Hat Network remain secure due to certificate checks performed on the secure connection.
Tags: rpm package red red-hat-network package-management-system red-hat-security

9:22
Red Hat Security Advisory 2011-1349-01
» ‎ Packet Storm Security Recent Files

Red Hat Security Advisory 2011-1349-01 - The RPM Package Manager is a command line driven package management system capable of installing, uninstalling, verifying, querying, and updating software packages. Multiple flaws were found in the way the RPM library parsed package headers. An attacker could create a specially-crafted RPM package that, when queried or installed, would cause rpm to crash or, potentially, execute arbitrary code. Note: Although an RPM package can, by design, execute arbitrary code when installed, this issue would allow a specially-crafted RPM package to execute arbitrary code before its digital signature has been verified. Package downloads from the Red Hat Network remain secure due to certificate checks performed on the secure connection.
Tags: rpm package red red-hat-network package-management-system red-hat-security

9:22
Red Hat Security Advisory 2011-1349-01
» ‎ Packet Storm Security Misc. Files

Red Hat Security Advisory 2011-1349-01 - The RPM Package Manager is a command line driven package management system capable of installing, uninstalling, verifying, querying, and updating software packages. Multiple flaws were found in the way the RPM library parsed package headers. An attacker could create a specially-crafted RPM package that, when queried or installed, would cause rpm to crash or, potentially, execute arbitrary code. Note: Although an RPM package can, by design, execute arbitrary code when installed, this issue would allow a specially-crafted RPM package to execute arbitrary code before its digital signature has been verified. Package downloads from the Red Hat Network remain secure due to certificate checks performed on the secure connection.
Tags: rpm package red red-hat-network package-management-system red-hat-security

September 15, 2011
16:52
Red Hat Security Advisory 2011-1299-01
» ‎ Packet Storm Security Advisories

Red Hat Security Advisory 2011-1299-01 - Red Hat Network Satellite provides a solution to organizations requiring absolute control over and privacy of the maintenance and package deployment of their servers. It allows organizations to utilize the benefits of the Red Hat Network without having to provide public Internet access to their servers or other client systems. Multiple cross-site scripting flaws were found in the RHN Satellite web interface. A remote attacker could use these flaws to perform a cross-site scripting attack against victims using the RHN Satellite web interface.
Tags: hat red satellite red-hat-network public-internet-access red-hat-security

16:52
Red Hat Security Advisory 2011-1299-01
» ‎ Packet Storm Security Recent Files

Red Hat Security Advisory 2011-1299-01 - Red Hat Network Satellite provides a solution to organizations requiring absolute control over and privacy of the maintenance and package deployment of their servers. It allows organizations to utilize the benefits of the Red Hat Network without having to provide public Internet access to their servers or other client systems. Multiple cross-site scripting flaws were found in the RHN Satellite web interface. A remote attacker could use these flaws to perform a cross-site scripting attack against victims using the RHN Satellite web interface.
Tags: hat red satellite red-hat-network public-internet-access red-hat-security

16:52
Red Hat Security Advisory 2011-1299-01
» ‎ Packet Storm Security Misc. Files

Red Hat Security Advisory 2011-1299-01 - Red Hat Network Satellite provides a solution to organizations requiring absolute control over and privacy of the maintenance and package deployment of their servers. It allows organizations to utilize the benefits of the Red Hat Network without having to provide public Internet access to their servers or other client systems. Multiple cross-site scripting flaws were found in the RHN Satellite web interface. A remote attacker could use these flaws to perform a cross-site scripting attack against victims using the RHN Satellite web interface.
Tags: hat red satellite red-hat-network public-internet-access red-hat-security

June 17, 2011
5:57
Red Hat Security Advisory 2011-0880-01
» ‎ Packet Storm Security Advisories

Red Hat Security Advisory 2011-0880-01 - This update corrects several security vulnerabilities in the IBM Java Runtime Environment shipped as part of Red Hat Network Satellite 5.4.1. In a typical operating environment, these are of low security risk as the runtime is not used on untrusted applets. This update fixes several vulnerabilities in the IBM Java 2 Runtime Environment. Detailed vulnerability descriptions are linked from the IBM "Security alerts" page, listed in the References section. Various other issues were also addressed.
Tags: hat red security java-2-runtime-environment java-runtime-environment red-hat-network

5:57
Red Hat Security Advisory 2011-0880-01
» ‎ Packet Storm Security Recent Files

Red Hat Security Advisory 2011-0880-01 - This update corrects several security vulnerabilities in the IBM Java Runtime Environment shipped as part of Red Hat Network Satellite 5.4.1. In a typical operating environment, these are of low security risk as the runtime is not used on untrusted applets. This update fixes several vulnerabilities in the IBM Java 2 Runtime Environment. Detailed vulnerability descriptions are linked from the IBM "Security alerts" page, listed in the References section. Various other issues were also addressed.
Tags: hat red security java-2-runtime-environment java-runtime-environment red-hat-network

5:57
Red Hat Security Advisory 2011-0880-01
» ‎ Packet Storm Security Misc. Files

Red Hat Security Advisory 2011-0880-01 - This update corrects several security vulnerabilities in the IBM Java Runtime Environment shipped as part of Red Hat Network Satellite 5.4.1. In a typical operating environment, these are of low security risk as the runtime is not used on untrusted applets. This update fixes several vulnerabilities in the IBM Java 2 Runtime Environment. Detailed vulnerability descriptions are linked from the IBM "Security alerts" page, listed in the References section. Various other issues were also addressed.
Tags: hat red security java-2-runtime-environment java-runtime-environment red-hat-network

5:56
Red Hat Security Advisory 2011-0879-01
» ‎ Packet Storm Security Advisories

Red Hat Security Advisory 2011-0879-01 - Red Hat Network Satellite provides a solution to organizations requiring absolute control over and privacy of the maintenance and package deployment of their servers. It allows organizations to utilize the benefits of the Red Hat Network without having to provide public Internet access to their servers or other client systems. It was found that RHN Satellite did not protect against Cross-Site Request Forgery attacks. If an authenticated RHN Satellite user visited a specially-crafted web page, it could lead to unauthorized command execution with the privileges of that user, for example, creating a new user account, granting administrator privileges to user accounts, disabling the account of the current user, and so on. Various other issues were also addressed.
Tags: user hat red red-hat-network public-internet-access satellite-user

5:56
Red Hat Security Advisory 2011-0879-01
» ‎ Packet Storm Security Recent Files

Red Hat Security Advisory 2011-0879-01 - Red Hat Network Satellite provides a solution to organizations requiring absolute control over and privacy of the maintenance and package deployment of their servers. It allows organizations to utilize the benefits of the Red Hat Network without having to provide public Internet access to their servers or other client systems. It was found that RHN Satellite did not protect against Cross-Site Request Forgery attacks. If an authenticated RHN Satellite user visited a specially-crafted web page, it could lead to unauthorized command execution with the privileges of that user, for example, creating a new user account, granting administrator privileges to user accounts, disabling the account of the current user, and so on. Various other issues were also addressed.
Tags: user hat red red-hat-network public-internet-access satellite-user

5:56
Red Hat Security Advisory 2011-0879-01
» ‎ Packet Storm Security Misc. Files

Red Hat Security Advisory 2011-0879-01 - Red Hat Network Satellite provides a solution to organizations requiring absolute control over and privacy of the maintenance and package deployment of their servers. It allows organizations to utilize the benefits of the Red Hat Network without having to provide public Internet access to their servers or other client systems. It was found that RHN Satellite did not protect against Cross-Site Request Forgery attacks. If an authenticated RHN Satellite user visited a specially-crafted web page, it could lead to unauthorized command execution with the privileges of that user, for example, creating a new user account, granting administrator privileges to user accounts, disabling the account of the current user, and so on. Various other issues were also addressed.
Tags: user hat red red-hat-network public-internet-access satellite-user

June 16, 2011
22:36
Secunia Security Advisory 44959
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Red Hat has acknowledged a vulnerability in Red Hat Network Satellite Server, which can be exploited by malicious people to conduct cross-site request forgery attacks.
Tags: advisory secunia security red-hat-network satellite-server
April 14, 2011
22:56
Secunia Security Advisory 44150
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Red Hat has acknowledged two vulnerabilities Red Hat Network Satellite Server, which can be exploited by malicious users to bypass certain security features and by malicious people to disclose potentially sensitive information.
Tags: advisory secunia security red-hat-network satellite-server network-satellite