SecurityTracker.com
    Home    |    View Topics    |    Search    |    Contact Us    |   

SecurityTracker
Archives


 


Category:   Application (Generic)  >   Red Hat Network Satellite Server Vendors:   Red Hat
Red Hat Network Satellite Server 'manzier.pxt' Hard Coded Common Authentication Key Lets Remote Users Obtain Information
SecurityTracker Alert ID:  1020694
SecurityTracker URL:  http://securitytracker.com/id/1020694
CVE Reference:   CVE-2008-2369   (Links to External Site)
Date:  Aug 13 2008
Impact:   Disclosure of user information
Fix Available:  Yes  Vendor Confirmed:  Yes  
Version(s): 5.1
Description:   A vulnerability was reported in Red Hat Network Satellite Server. A remote user can obtain information about users on the server.

The 'manzier.pxt' XML-RPC script uses a single hard-coded authentication key. A remote user with knowledge of the key can connect to the target Satellite Server XML-RPC service to obtain information about Satellite Server users, including as login names, associated email addresses, internal user IDs, and partial information about entitlements.

Impact:   A remote user can obtain information about users on the server.
Solution:   The vendor has issued a fixed version (5.1.1).

The vendor's advisory is available at:

https://rhn.redhat.com/errata/RHSA-2008-0630.html

Vendor URL:  rhn.redhat.com/errata/RHSA-2008-0630.html (Links to External Site)
Cause:   Authentication error
Underlying OS:  Linux (Red Hat Enterprise)
Underlying OS Comments:  4

Message History:   None.


 Source Message Contents

Subject:  [RHSA-2008:0630-01] Low: Red Hat Network Satellite Server security

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

=====================================================================
                   Red Hat Security Advisory

Synopsis:          Low: Red Hat Network Satellite Server security update
Advisory ID:       RHSA-2008:0630-01
Product:           Red Hat Network Satellite Server
Advisory URL:      https://rhn.redhat.com/errata/RHSA-2008-0630.html
Issue date:        2008-08-13
CVE Names:         CVE-2005-4838 CVE-2006-0254 CVE-2006-0898 
                   CVE-2007-1349 CVE-2007-1355 CVE-2007-1358 
                   CVE-2007-2449 CVE-2007-5461 CVE-2007-6306 
                   CVE-2008-0128 CVE-2008-2369 
=====================================================================

1. Summary:

Red Hat Network Satellite Server version 5.1.1 is now available. This
update includes fixes for a number of security issues in Red Hat Network
Satellite Server components.

This update has been rated as having low security impact by the Red Hat
Security Response Team.

2. Relevant releases/architectures:

Red Hat Network Satellite Server 5.1 (RHEL v.4 AS) - i386, noarch, s390, s390x, x86_64

3. Description:

During an internal security audit, it was discovered that Red Hat Network
Satellite Server shipped with an XML-RPC script, manzier.pxt, which had a
single hard-coded authentication key. A remote attacker who is able to
connect to the Satellite Server XML-RPC service could use this flaw to
obtain limited information about Satellite Server users, such as login
names, associated email addresses, internal user IDs, and partial
information about entitlements. (CVE-2008-2369)

This release also corrects several security vulnerabilities in various
components shipped as part of Red Hat Network Satellite Server 5.1. In a
typical operating environment, these components are not exposed to users
of Satellite Server in a vulnerable manner. These security updates will
reduce risk in unique Satellite Server environments.

A denial-of-service flaw was fixed in mod_perl. (CVE-2007-1349)

Multiple cross-site scripting flaws were fixed in the image map feature in
the JFreeChart package. (CVE-2007-6306)

A flaw which could result in weak encryption was fixed in the
perl-Crypt-CBC package. (CVE-2006-0898)

Multiple flaws were fixed in the Apache Tomcat package. (CVE-2005-4838,
CVE-2006-0254, CVE-2007-1355, CVE-2007-1358, CVE-2007-2449, CVE-2007-5461,
CVE-2008-0128)

Users of Red Hat Network Satellite Server 5.1 are advised to upgrade to
5.1.1, which resolves these issues.

4. Solution:

This update is available via Red Hat Network.  Details on how to use the
Red Hat Network to apply this update are available at
http://www.redhat.com/docs/manuals/satellite/Red_Hat_Network_Satellite-5.1.0/html/Installation_Guide/s1-maintenance-update.html

5. Bugs fixed (http://bugzilla.redhat.com/):

238401 - CVE-2005-4838 tomcat manager example DoS
240423 - CVE-2007-1349 mod_perl PerlRun denial of service
244803 - CVE-2007-1358 tomcat accept-language xss flaw
244804 - CVE-2007-2449 tomcat examples jsp XSS
253166 - CVE-2007-1355 tomcat XSS in samples
333791 - CVE-2007-5461 Absolute path traversal Apache Tomcat WEBDAV
421081 - CVE-2007-6306 JFreeChart: XSS vulnerabilities in the image map feature
429821 - CVE-2008-0128 tomcat5 SSO cookie login information disclosure
430522 - CVE-2006-0898 perl-Crypt-CBC weaker encryption with some ciphers
430646 - CVE-2006-0254 tomcat examples XSS

6. Package List:

Red Hat Network Satellite Server 5.1 (RHEL v.4 AS):

i386:
mod_perl-2.0.2-12.el4.i386.rpm
mod_perl-debuginfo-2.0.2-12.el4.i386.rpm

noarch:
jfreechart-0.9.20-3.rhn.noarch.rpm
perl-Crypt-CBC-2.24-1.el4.noarch.rpm
rhn-html-5.1.1-7.noarch.rpm
tomcat5-5.0.30-0jpp_10rh.noarch.rpm

s390:
mod_perl-2.0.2-12.el4.s390.rpm
mod_perl-debuginfo-2.0.2-12.el4.s390.rpm

s390x:
mod_perl-2.0.2-12.el4.s390x.rpm
mod_perl-debuginfo-2.0.2-12.el4.s390x.rpm

x86_64:
mod_perl-2.0.2-12.el4.x86_64.rpm
mod_perl-debuginfo-2.0.2-12.el4.x86_64.rpm

These packages are GPG signed by Red Hat for security.  Our key and 
details on how to verify the signature are available from
https://www.redhat.com/security/team/key/#package

7. References:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4838
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0254
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0898
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1349
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1355
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1358
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2449
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5461
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6306
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0128
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2369
http://www.redhat.com/security/updates/classification/#low

8. Contact:

The Red Hat security contact is <secalert@redhat.com>.  More contact
details at https://www.redhat.com/security/team/contact/

Copyright 2008 Red Hat, Inc.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.4 (GNU/Linux)

iD8DBQFIouz6XlSAg2UNWIIRAjk2AKCeYfaqUWkF2SU0CAst0m5OFVJ1SQCgqKv9
XMcDx1ap5vM15nb/GkTBd88=
=y1sx
-----END PGP SIGNATURE-----


--
RHSA-announce mailing list
RHSA-announce@redhat.com
https://www.redhat.com/mailman/listinfo/rhsa-announce

 
 


Go to the Top of This SecurityTracker Archive Page





Home   |    View Topics   |    Search   |    Contact Us

This web site uses cookies for web analytics. Learn More

Copyright 2021, SecurityGlobal.net LLC