RHSA-2008:0630Low

Red Hat Security Advisory: Red Hat Network Satellite Server security update

Published
August 13, 2008
Last Modified
November 21, 2025

🔗 CVE IDs covered (11)

CVE-2005-4838 →CVE-2006-0254 →CVE-2006-0898 →CVE-2007-1349 →CVE-2007-1355 →CVE-2007-1358 →CVE-2007-2449 →CVE-2007-5461 →CVE-2007-6306 →CVE-2008-0128 →CVE-2008-2369 →

📋 Description

CVE-2005-4838 — tomcat manager example DoS CVE-2006-0254 — tomcat examples XSS CVE-2006-0898 — perl-Crypt-CBC weaker encryption with some ciphers CVE-2007-1349 — mod_perl PerlRun denial of service CVE-2007-1355 — tomcat XSS in samples CVE-2007-1358 — tomcat accept-language xss flaw CVE-2007-2449 — tomcat examples jsp XSS CVE-2007-5461 — Absolute path traversal Apache Tomcat WEBDAV CVE-2007-6306 — JFreeChart: XSS vulnerabilities in the image map feature CVE-2008-0128 — tomcat5 SSO cookie login information disclosure CVE-2008-2369 — Satellite: information disclosure via manzier.pxt RPC script

🎯 Affected products13

  • Red Hat Satellite 5.1 (RHEL v.4 AS)
  • jfreechart-0:0.9.20-3.rhn.noarch as a component of Red Hat Satellite 5.1 (RHEL v.4 AS)
  • mod_perl-0:2.0.2-12.el4.i386 as a component of Red Hat Satellite 5.1 (RHEL v.4 AS)
  • mod_perl-0:2.0.2-12.el4.s390 as a component of Red Hat Satellite 5.1 (RHEL v.4 AS)
  • mod_perl-0:2.0.2-12.el4.s390x as a component of Red Hat Satellite 5.1 (RHEL v.4 AS)
  • mod_perl-0:2.0.2-12.el4.x86_64 as a component of Red Hat Satellite 5.1 (RHEL v.4 AS)
  • mod_perl-debuginfo-0:2.0.2-12.el4.i386 as a component of Red Hat Satellite 5.1 (RHEL v.4 AS)
  • mod_perl-debuginfo-0:2.0.2-12.el4.s390 as a component of Red Hat Satellite 5.1 (RHEL v.4 AS)
  • mod_perl-debuginfo-0:2.0.2-12.el4.s390x as a component of Red Hat Satellite 5.1 (RHEL v.4 AS)
  • mod_perl-debuginfo-0:2.0.2-12.el4.x86_64 as a component of Red Hat Satellite 5.1 (RHEL v.4 AS)
  • perl-Crypt-CBC-0:2.24-1.el4.noarch as a component of Red Hat Satellite 5.1 (RHEL v.4 AS)
  • rhn-html-0:5.1.1-7.noarch as a component of Red Hat Satellite 5.1 (RHEL v.4 AS)
  • tomcat5-0:5.0.30-0jpp_10rh.noarch as a component of Red Hat Satellite 5.1 (RHEL v.4 AS)

✅ Remediation

This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://www.redhat.com/docs/manuals/satellite/Red_Hat_Network_Satellite-5.1.0/html/Installation_Guide/s1-maintenance-update.html

🔗 References (14)