Skip to content
OpenAdvisories
Critical RHSA-2008:0264 12 CVEs

Red Hat Security Advisory: Red Hat Network Satellite Server Solaris client security update

Published Sep 15, 2024 · Updated Jan 14, 2026

Ecosystem: Red Hat

Fixed packages 2

ReleasePackageFixed in
Red Hat · Network Satellite 5 network_satellite:5.0:el4 rhn_solaris_bootstrap_5_0_2_3 0:1-0
Red Hat · Network Satellite 5 network_satellite:5.0:el4 rhn-solaris-bootstrap 0:5.0.2-3

Vulnerabilities 12

  • Critical 9.1
    CVE-2006-4339

    Openssl: openssl: signature forgery via improper pkcs-1 padding removal leading to certificate validation bypass

    A flaw was found in OpenSSL. When configured to use an RSA key with exponent 3, OpenSSL improperly removes PKCS-1 padding before generating a hash. This allows remote attackers to forge PKCS #1 v1.5 signatures. Consequently, OpenSSL may incorrectly verify X.5…

    Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian
  • Unscored —
    CVE-2005-1849

    inftrees.h in zlib 1.2.2 allows remote attackers to cause a denial of service (application crash) via an invalid file t…

    zlib sash zsync Debian
  • Unscored —
    CVE-2005-2096

    zlib 1.2 and later versions allows remote attackers to cause a denial of service (crash) via a crafted compressed strea…

    rpm dpkg zlib bacula Debian
  • Unscored —
    CVE-2005-2969

    The SSL/TLS server implementation in OpenSSL 0.9.7 before 0.9.7h and 0.9.8 before 0.9.8a, when using the SSL_OP_MSIE_SS…

    openssl Debian
  • Unscored —
    CVE-2006-1542 Public exploit

    Stack-based buffer overflow in Python 2.4.2 and earlier, running on Linux 2.6.12.5 under gcc 4.0.3 with libc 2.3.5, all…

    python-py Azure Linux
  • Unscored —
    CVE-2006-2937 EPSS 11%

    OpenSSL 0.9.7 before 0.9.7l and 0.9.8 before 0.9.8d allows remote attackers to cause a denial of service (infinite loop…

    openssl Debian
  • Unscored —
    CVE-2006-2940

    OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows attackers to cause a denial of service (C…

    openssl Debian
  • Unscored —
    CVE-2006-3738 EPSS 50%

    Buffer overflow in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier…

    openssl Debian
  • Unscored —
    CVE-2006-4343 Public exploit EPSS 19%

    The get_server_hello function in the SSLv2 client code in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier…

    openssl Debian
  • Unscored —
    CVE-2006-4980

    Buffer overflow in the repr function in Python 2.3 through 2.6 before 20060822 allows context-dependent attackers to ca…

    python-py Azure Linux
  • Unscored —
    CVE-2007-2052 Public exploit EPSS 14%

    Off-by-one error in the PyLocale_strxfrm function in Modules/_localemodule.c for Python 2.4 and 2.5 causes an incorrect…

  • Unscored —
    CVE-2007-4965 Public exploit EPSS 14%

    Multiple integer overflows in the imageop module in Python 2.5.1 and earlier allow context-dependent attackers to cause…

    python-py Azure Linux

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=235093
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=295971
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=430640
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=430641
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=430649
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=430651
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=430652
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=430654
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=430655
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=430659
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=430660
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0264.json
  • report
    https://access.redhat.com/security/cve/CVE-2005-1849
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2005-1849
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2005-1849
  • report
    https://access.redhat.com/security/cve/CVE-2005-2096
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=430650
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2005-2096
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2005-2096
  • report
    https://access.redhat.com/security/cve/CVE-2005-2969
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2005-2969
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2005-2969
  • report
    https://access.redhat.com/security/cve/CVE-2006-1542
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2006-1542
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2006-1542
  • report
    https://access.redhat.com/security/cve/CVE-2006-2937
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2006-2937
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2006-2937
  • report
    https://access.redhat.com/security/cve/CVE-2006-2940
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2006-2940
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2006-2940
  • report
    https://access.redhat.com/security/cve/CVE-2006-3738
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2006-3738
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2006-3738
  • report
    https://access.redhat.com/security/cve/CVE-2006-4339
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2006-4339
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2006-4339
  • report
    https://access.redhat.com/security/cve/CVE-2006-4343