NVD

Id
3153  
Name
CVE-2008-3270  
Description
yum-rhn-plugin in Red Hat Enterprise Linux (RHEL) 5 does not verify the SSL certificate for a file download from a Red Hat Network (RHN) server, which makes it easier for remote man-in-the-middle attackers to cause a denial of service (loss of updates) or force the download and installation of official Red Hat packages that were not requested.  
Reject
 
CVSS Version
2  
CVSS Score
2.6  
Severity
Low  
CVSS Base Score
2.6  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-03  
Published
2008-08-18  
Modified Date
2010-08-21  
Seq
2008-3270  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
19996 3153 CVE-2008-3270 oval:org.mitre.oval:def:10864  View
19997 3153 CVE-2008-3270 1020698  View
19998 3153 CVE-2008-3270 RHSA-2008:0815  View
19999 3153 CVE-2008-3270 30695  View
20000 3153 CVE-2008-3270 https://bugzilla.redhat.com/show_bug.cgi?id=457113  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46338 JVNDB-2008-001648 Red Hat Enterprise Linux の yum-rhn-plugin におけるサービス運用妨害 (DoS) の脆弱性 Red Hat Enterprise Linux 上の yum-rhn-plugin には、SSL 証明書を確認する処理において不備があり、サービス運用妨害 (DoS) の脆弱性が存在します。 CVE-2008-3270 33383 CVE-2008-3270 3153 2.6 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001648.html 2008-08-14 2008-09-10 View