Skip to content
OpenAdvisories
Unscored RHSA-2008:0061 2 CVEs

Red Hat Security Advisory: setroubleshoot security and bug fix update

Published Sep 15, 2024 · Updated Nov 22, 2025

Ecosystem: Red Hat

Fixed packages 6

ReleasePackageFixed in
Red Hat · RHEL 5 enterprise_linux:5::client setroubleshoot 0:2.0.5-3.el5
Red Hat · RHEL 5 enterprise_linux:5::client setroubleshoot-plugins 0:2.0.4-2.el5
Red Hat · RHEL 5 enterprise_linux:5::client setroubleshoot-server 0:2.0.5-3.el5
Red Hat · RHEL 5 enterprise_linux:5::server setroubleshoot 0:2.0.5-3.el5
Red Hat · RHEL 5 enterprise_linux:5::server setroubleshoot-plugins 0:2.0.4-2.el5
Red Hat · RHEL 5 enterprise_linux:5::server setroubleshoot-server 0:2.0.5-3.el5

Vulnerabilities 2

  • Unscored —
    CVE-2007-5495

    sealert in setroubleshoot 2.0.5 allows local users to overwrite arbitrary files via a symlink attack on the sealert.log…

  • Unscored —
    CVE-2007-5496

    Cross-site scripting (XSS) vulnerability in setroubleshoot 2.0.5 allows local users to inject arbitrary web script or H…

References

  • article
    http://www.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=312281
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=227806
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=240355
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=241543
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=243800
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=244345
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=250239
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=288221
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=288271
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=288881
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=431768
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=436564
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0061.json
  • report
    https://access.redhat.com/security/cve/CVE-2007-5495
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-5495
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-5495
  • report
    https://access.redhat.com/security/cve/CVE-2007-5496
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-5496
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-5496