RHSA-2011:0434Medium

Red Hat Security Advisory: security update for Red Hat Network Satellite

Published
April 11, 2011
Last Modified
January 28, 2026

🔗 CVE IDs covered (2)

CVE-2009-0788 →CVE-2010-1171 →

📋 Description

CVE-2009-0788 — rhn_satellite: Incorrect mod_rewrite rules (information disclosure, abuse as distributed DoS tool) CVE-2010-1171 — rhn_satellite: Improper channel comps information management

🎯 Affected products62

  • Red Hat Satellite 5.3 (RHEL v.4)
  • Red Hat Satellite 5.3 (RHEL v.5)
  • Red Hat Satellite 5.4 (RHEL v.5)
  • spacewalk-backend-0:0.5.28-59.2.el4sat.noarch as a component of Red Hat Satellite 5.3 (RHEL v.4)
  • spacewalk-backend-0:0.5.28-59.2.el4sat.src as a component of Red Hat Satellite 5.3 (RHEL v.4)
  • spacewalk-backend-0:0.5.28-59.2.el5sat.noarch as a component of Red Hat Satellite 5.3 (RHEL v.5)
  • spacewalk-backend-0:0.5.28-59.2.el5sat.src as a component of Red Hat Satellite 5.3 (RHEL v.5)
  • spacewalk-backend-0:1.2.13-37.el5sat.noarch as a component of Red Hat Satellite 5.4 (RHEL v.5)
  • spacewalk-backend-0:1.2.13-37.el5sat.src as a component of Red Hat Satellite 5.4 (RHEL v.5)
  • spacewalk-backend-app-0:0.5.28-59.2.el4sat.noarch as a component of Red Hat Satellite 5.3 (RHEL v.4)
  • spacewalk-backend-app-0:0.5.28-59.2.el5sat.noarch as a component of Red Hat Satellite 5.3 (RHEL v.5)
  • spacewalk-backend-app-0:1.2.13-37.el5sat.noarch as a component of Red Hat Satellite 5.4 (RHEL v.5)
  • spacewalk-backend-applet-0:0.5.28-59.2.el4sat.noarch as a component of Red Hat Satellite 5.3 (RHEL v.4)
  • spacewalk-backend-applet-0:0.5.28-59.2.el5sat.noarch as a component of Red Hat Satellite 5.3 (RHEL v.5)
  • spacewalk-backend-applet-0:1.2.13-37.el5sat.noarch as a component of Red Hat Satellite 5.4 (RHEL v.5)
  • spacewalk-backend-config-files-0:0.5.28-59.2.el4sat.noarch as a component of Red Hat Satellite 5.3 (RHEL v.4)
  • spacewalk-backend-config-files-0:0.5.28-59.2.el5sat.noarch as a component of Red Hat Satellite 5.3 (RHEL v.5)
  • spacewalk-backend-config-files-0:1.2.13-37.el5sat.noarch as a component of Red Hat Satellite 5.4 (RHEL v.5)
  • spacewalk-backend-config-files-common-0:0.5.28-59.2.el4sat.noarch as a component of Red Hat Satellite 5.3 (RHEL v.4)
  • spacewalk-backend-config-files-common-0:0.5.28-59.2.el5sat.noarch as a component of Red Hat Satellite 5.3 (RHEL v.5)
  • spacewalk-backend-config-files-common-0:1.2.13-37.el5sat.noarch as a component of Red Hat Satellite 5.4 (RHEL v.5)
  • spacewalk-backend-config-files-tool-0:0.5.28-59.2.el4sat.noarch as a component of Red Hat Satellite 5.3 (RHEL v.4)
  • spacewalk-backend-config-files-tool-0:0.5.28-59.2.el5sat.noarch as a component of Red Hat Satellite 5.3 (RHEL v.5)
  • spacewalk-backend-config-files-tool-0:1.2.13-37.el5sat.noarch as a component of Red Hat Satellite 5.4 (RHEL v.5)
  • spacewalk-backend-iss-0:0.5.28-59.2.el4sat.noarch as a component of Red Hat Satellite 5.3 (RHEL v.4)
  • spacewalk-backend-iss-0:0.5.28-59.2.el5sat.noarch as a component of Red Hat Satellite 5.3 (RHEL v.5)
  • spacewalk-backend-iss-0:1.2.13-37.el5sat.noarch as a component of Red Hat Satellite 5.4 (RHEL v.5)
  • spacewalk-backend-iss-export-0:0.5.28-59.2.el4sat.noarch as a component of Red Hat Satellite 5.3 (RHEL v.4)
  • spacewalk-backend-iss-export-0:0.5.28-59.2.el5sat.noarch as a component of Red Hat Satellite 5.3 (RHEL v.5)
  • spacewalk-backend-iss-export-0:1.2.13-37.el5sat.noarch as a component of Red Hat Satellite 5.4 (RHEL v.5)
  • +32 more not shown

✅ Remediation

Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/kb/docs/DOC-11259 The patch for CVE-2009-0788 includes changes to "/etc/httpd/conf.d/zz-spacewalk-www.conf". If you have manually edited this file, this erratum will not overwrite or replace your existing version, but will create a new file containing the fixes, "/etc/httpd/conf.d/zz-spacewalk-www.conf.rpmnew". If this .rpmnew file exists after installing the update, the following steps must be performed to fully fix CVE-2009-0788: 1) Create a backup copy of your "/etc/httpd/conf.d/zz-spacewalk-www.conf" file. 2) Carefully review your manual zz-spacewalk-www.conf changes, and merge those changes into the zz-spacewalk-www.conf.rpmnew file. 3) Once you have merged all your manual changes into zz-spacewalk-www.conf.rpmnew, save this new version as "/etc/httpd/conf.d/zz-spacewalk-www.conf", and then restart the RHN Satellite server ("rhn-satellite restart").

🔗 References (5)