Unscored severity · published Feb 25, 2011
CVE-2011-0718
Red Hat Network (RHN) Satellite Server 5.4 does not use a time delay after a failed login attempt, which makes it easier for remote attackers to conduct brute force password…
–
CVSS
1.3%
EPSS
No
On KEV
Description
Red Hat Network (RHN) Satellite Server 5.4 does not use a time delay after a failed login attempt, which makes it easier for remote attackers to conduct brute force password guessing attacks.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 70% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NS
Network Satellite Server · Redhat
5.4 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-0718
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-0718
Vendor Advisory
http://secunia.com/advisories/43487
www.redhat.com
http://www.redhat.com/support/errata/RHSA-2011-0300.html
www.securityfocus.com
http://www.securityfocus.com/bid/46528
www.securitytracker.com
http://www.securitytracker.com/id?1025116
Vendor Advisory
http://www.vupen.com/english/advisories/2011/0491
bugzilla.redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=672159
More from Network Satellite Server
6.8
CVE-2009-4139
A flaw was found in Spacewalk Java site packages
–
CVE-2009-0788
Red Hat Network (RHN) Satellite Server 5.3 and 5.4 does not properly rewrite unspecified URLs, which allows remote attackers to (1) obtain unspecified sensitive host information…
–
CVE-2011-0717
Session fixation vulnerability in Red Hat Network (RHN) Satellite Server 5.4 allows remote attackers to hijack web sessions via unspecified vectors related to Spacewalk