Approved changes feed: RSS · Atom

cpe:2.3:a:redhat:rhn-client-tools:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorRedhat (e942785a-ca89-506e-bd99-50782639cde3)
ProductRhn Client Tools (630fbfc8-6649-5424-b979-fd62a846f98d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:gitlab/redhat/rhn-client-tools purl2cpe 2026-06-01 10:12:54.124178

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-1777 vulnerable 2026-06-08 05:06:26.198301 Details available
rhnreg_ks in Red Hat Network Client Tools (aka rhn-client-tools) on Red Hat Gluster Storage 2.1 and Enterprise Linux (RHEL) 5, 6, and 7 does not properly validate hostnames in X.509 certificates from SSL servers, which allows remote attackers to prevent system registration via a man-in-the-middle attack.
Published: 2018-04-12T15:00:00.000Z
Updated: 2024-08-06T04:54:15.986Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-1439 not_vulnerable 2026-06-08 04:54:08.105426 Details available
yum-rhn-plugin in Red Hat Network Client Tools (aka rhn-client-tools) on Red Hat Enterprise Linux (RHEL) 5 and Fedora uses world-readable permissions for the /var/spool/up2date/loginAuth.pkl file, which allows local users to access the Red Hat Network profile, and possibly prevent future security updates, by leveraging authentication data from this file.
Published: 2010-06-07T14:00:00.000Z
Updated: 2024-08-07T01:21:19.158Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.