CVE-2013-6434

Related Files

Red Hat Security Advisory 2014-0038-01

Posted Jan 22, 2014

Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2014-0038-01 - Red Hat Enterprise Virtualization Manager is a visual tool for centrally managing collections of virtual servers running Red Hat Enterprise Linux and Microsoft Windows. This package also includes the Red Hat Enterprise Virtualization Manager API, a set of scriptable commands that give administrators the ability to perform queries and operations on Red Hat Enterprise Virtualization Manager. A flaw was found in the way Red Hat Enterprise Virtualization Manager relayed SPICE connection information to remote-viewer when a native SPICE client invocation method was used. As a result, remote-viewer attempted an insecure connection first and only switched to a secure connection when requested by the SPICE server. An attacker able to intercept the SPICE connection could use this flaw to conduct man-in-the-middle attacks.

tags | advisory, remote

systems | linux, redhat, windows

advisories | CVE-2013-6434

SHA-256 | 5df079ba6e849babda647aa9e89fe5a31f17c77cebc3fcbbac4b809f9baf9f42

Download | Favorite | View