CVE-2013-2056

Related Files

Red Hat Security Advisory 2013-0848-01

Posted May 21, 2013

Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2013-0848-01 - Red Hat Network Satellite is a system management tool for Linux-based infrastructures. It allows for provisioning, monitoring, and remote management of multiple Linux deployments with a single, centralized tool. It was discovered that Red Hat Network Satellite did not fully check the authenticity of a client beyond the initial authentication check during an Inter-Satellite Sync operation. If a remote attacker were to modify the satellite-sync client to skip the initial authentication call, they could obtain all channel content from any Red Hat Network Satellite server that could be reached, even if Inter-Satellite Sync support was disabled.

tags | advisory, remote

systems | linux, redhat

advisories | CVE-2013-2056

SHA-256 | 1e1bacce042d7c5990538d17a74f3a97509aa024e7e528212b1beb9ab9ebad43

Download | Favorite | View