RHSA-2008:0261Medium

Red Hat Security Advisory: Red Hat Network Satellite Server security update

Published
May 20, 2008
Last Modified
October 30, 2026

🔗 CVE IDs covered (35)

CVE-2004-0885 →CVE-2005-0605 →CVE-2005-2090 →CVE-2005-3510 →CVE-2005-3964 →CVE-2005-4838 →CVE-2006-0254 →CVE-2006-0898 →CVE-2006-1329 →CVE-2006-3835 →CVE-2006-5752 →CVE-2006-7195 →CVE-2006-7196 →CVE-2006-7197 →CVE-2007-0243 →CVE-2007-0450 →CVE-2007-1349 →CVE-2007-1355 →CVE-2007-1358 →CVE-2007-1860 →CVE-2007-2435 →CVE-2007-2449 →CVE-2007-2450 →CVE-2007-2788 →CVE-2007-2789 →CVE-2007-3304 →CVE-2007-3382 →CVE-2007-3385 →CVE-2007-4465 →CVE-2007-5000 →CVE-2007-5461 →CVE-2007-5961 →CVE-2007-6306 →CVE-2007-6388 →CVE-2008-0128 →

📋 Description

CVE-2004-0885 — mod_ssl SSLCipherSuite bypass CVE-2005-0605 — libxpm buffer overflow CVE-2005-2090 — tomcat multiple content-length header poisioning CVE-2005-3510 — tomcat DoS CVE-2005-3964 — openmotif libUil buffer overflows CVE-2005-4838 — tomcat manager example DoS CVE-2006-0254 — tomcat examples XSS CVE-2006-0898 — perl-Crypt-CBC weaker encryption with some ciphers CVE-2006-1329 — jabberd SASL DoS CVE-2006-3835 — tomcat directory listing issue CVE-2006-5752 — httpd mod_status XSS CVE-2006-7195 — tomcat XSS in example webapps CVE-2006-7196 — tomcat XSS in example webapps CVE-2006-7197 — mod_jk chunk too long CVE-2007-0243 — java-jre: GIF buffer overflow CVE-2007-0450 — tomcat directory traversal CVE-2007-1349 — mod_perl PerlRun denial of service CVE-2007-1355 — tomcat XSS in samples CVE-2007-1358 — tomcat accept-language xss flaw CVE-2007-1860 — mod_jk sends decoded URL to tomcat CVE-2007-2435 — javaws vulnerabilities CVE-2007-2449 — tomcat examples jsp XSS CVE-2007-2450 — tomcat host manager XSS CVE-2007-2788 — Integer overflow in the embedded ICC profile image parser in Sun Java Development Kit CVE-2007-2789 — BMP image parser vulnerability CVE-2007-3304 — httpd scoreboard lack of PID protection CVE-2007-3382 — tomcat handling of cookies CVE-2007-3385 — tomcat handling of cookie values CVE-2007-4465 — mod_autoindex XSS CVE-2007-5000 — httpd: mod_imagemap XSS CVE-2007-5461 — Absolute path traversal Apache Tomcat WEBDAV CVE-2007-5961 — RHN XSS flaw CVE-2007-6306 — JFreeChart: XSS vulnerabilities in the image map feature CVE-2007-6388 — apache mod_status cross-site scripting CVE-2008-0128 — tomcat5 SSO cookie login information disclosure

🎯 Affected products13

  • Red Hat Satellite 5.0 (RHEL v.4 AS)
  • jabberd-0:2.0s10-3.38.rhn.i386 as a component of Red Hat Satellite 5.0 (RHEL v.4 AS)
  • java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4.i386 as a component of Red Hat Satellite 5.0 (RHEL v.4 AS)
  • java-1.4.2-ibm-devel-0:1.4.2.10-1jpp.2.el4.i386 as a component of Red Hat Satellite 5.0 (RHEL v.4 AS)
  • jfreechart-0:0.9.20-3.rhn.noarch as a component of Red Hat Satellite 5.0 (RHEL v.4 AS)
  • openmotif21-0:2.1.30-11.RHEL4.6.i386 as a component of Red Hat Satellite 5.0 (RHEL v.4 AS)
  • openmotif21-debuginfo-0:2.1.30-11.RHEL4.6.i386 as a component of Red Hat Satellite 5.0 (RHEL v.4 AS)
  • perl-Crypt-CBC-0:2.24-1.el4.noarch as a component of Red Hat Satellite 5.0 (RHEL v.4 AS)
  • rhn-apache-0:1.3.27-36.rhn.rhel4.i386 as a component of Red Hat Satellite 5.0 (RHEL v.4 AS)
  • rhn-modjk-ap13-0:1.2.23-2rhn.rhel4.i386 as a component of Red Hat Satellite 5.0 (RHEL v.4 AS)
  • rhn-modperl-0:1.29-16.rhel4.i386 as a component of Red Hat Satellite 5.0 (RHEL v.4 AS)
  • rhn-modssl-0:2.8.12-8.rhn.10.rhel4.i386 as a component of Red Hat Satellite 5.0 (RHEL v.4 AS)
  • tomcat5-0:5.0.30-0jpp_10rh.noarch as a component of Red Hat Satellite 5.0 (RHEL v.4 AS)

✅ Remediation

This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://www.redhat.com/docs/manuals/satellite/Red_Hat_Network_Satellite-5.0.0/html/Installation_Guide/s1-maintenance-update.html

🔗 References (5)