Skip to content
OpenAdvisories
Unscored RHSA-2008:0630 11 CVEs

Red Hat Security Advisory: Red Hat Network Satellite Server security update

Published Sep 15, 2024 · Updated Nov 22, 2025

Ecosystem: Red Hat

Fixed packages 6

ReleasePackageFixed in
Red Hat · Network Satellite 5 network_satellite:5.1::el4 jfreechart 0:0.9.20-3.rhn
Red Hat · Network Satellite 5 network_satellite:5.1::el4 mod_perl 0:2.0.2-12.el4
Red Hat · Network Satellite 5 network_satellite:5.1::el4 mod_perl-debuginfo 0:2.0.2-12.el4
Red Hat · Network Satellite 5 network_satellite:5.1::el4 perl-Crypt-CBC 0:2.24-1.el4
Red Hat · Network Satellite 5 network_satellite:5.1::el4 rhn-html 0:5.1.1-7
Red Hat · Network Satellite 5 network_satellite:5.1::el4 tomcat5 0:5.0.30-0jpp_10rh

Vulnerabilities 11

  • Unscored —
    CVE-2005-4838

    Multiple cross-site scripting (XSS) vulnerabilities in the example web applications for Jakarta Tomcat 5.5.6 and earlie…

  • Medium —
    CVE-2006-0254 Public exploit EPSS 32%

    Apache Geronimo console 1.0 vulnerable to cross-site scripting

    Multiple cross-site scripting (XSS) vulnerabilities in Apache Geronimo 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) time parameter to cal2.jsp and (2) any invalid parameter, which causes an XSS when the log file is viewed by t…

    geronimo:geronimo-console-standard Maven
  • Unscored —
    CVE-2006-0898

    Crypt::CBC Perl module 2.16 and earlier, when running in RandomIV mode, uses an initialization vector (IV) of 8 bytes, …

    libcrypt-cbc-perl Debian
  • Unscored —
    CVE-2007-1349 EPSS 10%

    PerlRun.pm in Apache mod_perl before 1.30, and RegistryCooker.pm in mod_perl 2.x, does not properly escape PATH_INFO be…

    libapache2-mod-perl2 Debian
  • Medium —
    CVE-2007-1355 Public exploit EPSS 58%

    Apache Tomcat Vulnerable to Cross-Site Scripting

    Multiple cross-site scripting (XSS) vulnerabilities in the appdev/sample/web/hello.jsp example application in Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.23, and 6.0.0 through 6.0.10 allow remote attackers to inje…

    org.apache.tomcat:jsp-api org.apache.tomcat:servlet-api Maven
  • Low —
    CVE-2007-1358 EPSS 20%

    Apache Tomcat XSS In Accept-Language Headers

    Cross-site scripting (XSS) vulnerability in certain applications using Apache Tomcat 4.0.0 through 4.0.6 and 4.1.0 through 4.1.34 allows remote attackers to inject arbitrary web script or HTML via crafted "Accept-Language headers that do not conform to RFC 26…

    org.apache.tomcat:tomcat Maven
  • Medium —
    CVE-2007-2449 Public exploit Scanner template EPSS 77%

    Apache Tomcat XSS Vulnerabilities in Examples Web Application

    Multiple cross-site scripting (XSS) vulnerabilities in certain JSP files in the examples web application in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.24, and 6.0.0 through 6.0.13 allow remote attackers to…

    org.apache.tomcat:tomcat Maven
  • Low —
    CVE-2007-5461 Public exploit EPSS 40%

    Apache Tomcat Path Traversal Vulnerability

    Absolute path traversal vulnerability in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0, 5.0.0, 5.5.0 through 5.5.25, and 6.0.0 through 6.0.14, under certain configurations, allows remote authenticated users to read arbitrary files via a WebDAV write request that s…

    org.apache.tomcat:tomcat Maven
  • Unscored —
    CVE-2007-6306

    Multiple cross-site scripting (XSS) vulnerabilities in the image map feature in JFreeChart 1.0.8 allow remote attackers…

    libjfreechart-java Debian
  • Unscored —
    CVE-2008-0128 Public exploit EPSS 20%

    The SingleSignOn Valve (org.apache.catalina.authenticator.SingleSignOn) in Apache Tomcat before 5.5.21 does not set the…

  • Unscored —
    CVE-2008-2369

    manzier.pxt in Red Hat Network Satellite Server before 5.1.1 has a hard-coded authentication key, which allows remote a…

References

  • article
    https://access.redhat.com/security/updates/classification/#low
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=238401
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=240423
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=244803
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=253166
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=333791
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=421081
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=452461
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=244804
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=429821
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=430522
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=430646
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0630.json
  • report
    https://access.redhat.com/security/cve/CVE-2005-4838
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2005-4838
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2005-4838
  • report
    https://access.redhat.com/security/cve/CVE-2006-0254
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2006-0254
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2006-0254
  • report
    https://access.redhat.com/security/cve/CVE-2006-0898
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2006-0898
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2006-0898
  • report
    https://access.redhat.com/security/cve/CVE-2007-1349
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-1349
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-1349
  • report
    https://access.redhat.com/security/cve/CVE-2007-1355
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-1355
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-1355
  • report
    https://access.redhat.com/security/cve/CVE-2007-1358
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-1358
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-1358
  • report
    https://access.redhat.com/security/cve/CVE-2007-2449
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-2449
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-2449
  • report
    https://access.redhat.com/security/cve/CVE-2007-5461
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-5461
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-5461
  • report
    https://access.redhat.com/security/cve/CVE-2007-6306
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-6306