Unscored severity · published Apr 18, 2011
CVE-2009-0788
Red Hat Network (RHN) Satellite Server 5.3 and 5.4 does not properly rewrite unspecified URLs, which allows remote attackers to (1) obtain unspecified sensitive host information…
–
CVSS
1.7%
EPSS
No
On KEV
Description
Red Hat Network (RHN) Satellite Server 5.3 and 5.4 does not properly rewrite unspecified URLs, which allows remote attackers to (1) obtain unspecified sensitive host information or (2) use the server as an inadvertent proxy to connect to arbitrary services and IP addresses via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.7% · higher than 77% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NS
Network Satellite Server · Redhat
5.3; 5.4 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-0788
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-0788
Vendor Advisory
http://secunia.com/advisories/44150
www.redhat.com
http://www.redhat.com/support/errata/RHSA-2011-0434.html
www.securityfocus.com
http://www.securityfocus.com/bid/47316
www.securitytracker.com
http://www.securitytracker.com/id?1025316
Vendor Advisory
http://www.vupen.com/english/advisories/2011/0967
bugzilla.redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=491365
More from Network Satellite Server
6.8
CVE-2009-4139
A flaw was found in Spacewalk Java site packages
–
CVE-2011-0717
Session fixation vulnerability in Red Hat Network (RHN) Satellite Server 5.4 allows remote attackers to hijack web sessions via unspecified vectors related to Spacewalk
–
CVE-2011-0718
Red Hat Network (RHN) Satellite Server 5.4 does not use a time delay after a failed login attempt, which makes it easier for remote attackers to conduct brute force password…