CVEvulnerability
CVE-2012-1145
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-06-16
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-287
Description
spacewalk-backend in Red Hat Network Satellite 5.4 on Red Hat Enterprise Linux 6 does not properly authorize or authenticate uploads to the NULL organization when mod_wsgi is used, which allows remote attackers to cause a denial of service (/var partition disk consumption and failed updates) via a large number of package uploads.
Affected configurations
• redhat satellite 5.4
Related
Weakness · CWE (1)
- CWE-287 Improper Authentication weakness
References
- http://rhn.redhat.com/errata/RHSA-2012-0436.html Vendor Advisory
- http://secunia.com/advisories/48664 Broken Link
- http://www.osvdb.org/81481 Broken Link
- http://www.securityfocus.com/bid/52832 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id?1026873 Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/74498 Third Party Advisory, VDB Entry
- http://rhn.redhat.com/errata/RHSA-2012-0436.html Vendor Advisory
- http://secunia.com/advisories/48664 Broken Link
- http://www.osvdb.org/81481 Broken Link
- http://www.securityfocus.com/bid/52832 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id?1026873 Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/74498 Third Party Advisory, VDB Entry