CVE

Id
33387  
CVE No.
CVE-2008-3270  
Status
Candidate  
Description
yum-rhn-plugin in Red Hat Enterprise Linux (RHEL) 5 does not verify the SSL certificate for a file download from a Red Hat Network (RHN) server, which makes it easier for remote man-in-the-middle attackers to cause a denial of service (loss of updates) or force the download and installation of official Red Hat packages that were not requested.  
Phase
Assigned (20080724)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
363433 33387 CVE-2008-3270 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=457113  View
363434 33387 CVE-2008-3270 REDHAT:RHSA-2008:0815  View
363435 33387 CVE-2008-3270 URL:http://www.redhat.com/support/errata/RHSA-2008-0815.html  View
363436 33387 CVE-2008-3270 BID:30695  View
363437 33387 CVE-2008-3270 URL:http://www.securityfocus.com/bid/30695  View
363438 33387 CVE-2008-3270 OVAL:oval:org.mitre.oval:def:10864  View
363439 33387 CVE-2008-3270 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10864  View
363440 33387 CVE-2008-3270 SECTRACK:1020698  View
363441 33387 CVE-2008-3270 URL:http://securitytracker.com/id?1020698  View
363442 33387 CVE-2008-3270 SECUNIA:31472  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
50739 JVNDB-2008-006049 Red Hat Enterprise IPA および FreeIPA のデフォルト設定における Kerberos マスターキーを取得される脆弱性 Red Hat Enterprise IPA および FreeIPA のデフォルト設定は、krbMKey 属性に対して read ACL 上で ldap:///anyone を配置するため、Kerberos マスターキーを取得される脆弱性が存在します。 CVE-2008-3274 33387 5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-006049.html  View