GCVE - cpe:2.3:a:redhat:satellite:5.3:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:redhat:satellite:5.3:*:*:*:*:*:*:*

part: a version: 5.3 update: *

Vendor	Redhat (`e942785a-ca89-506e-bd99-50782639cde3`)
Product	Satellite (`0887e319-aaeb-5982-9c2f-3d67b0c1b34e`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2017-7513`	vulnerable	2026-06-08 05:09:56.362106	Details available MEDIUM (5.4) It was found that Satellite 5 configured with SSL/TLS for the PostgreSQL backend failed to correctly validate X.509 server certificate host name fields. A man-in-the-middle attacker could use this flaw to spoof a PostgreSQL server using a specially crafted X.509 certificate. Published: 2018-08-22T15:00:00.000Z Updated: 2024-08-05T16:04:11.809Z Open on db.gcve.eu Reference links https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7513	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-2056`	vulnerable	2026-06-08 05:03:58.160482	Details available The Inter-Satellite Sync (ISS) operation in Red Hat Network (RHN) Satellite 5.3, 5.4, and 5.5 does not properly check client "authenticity," which allows remote attackers to obtain channel content by skipping the initial authentication call. Published: 2013-07-31T10:00:00.000Z Updated: 2024-08-06T15:20:37.488Z Open on db.gcve.eu Reference links http://rhn.redhat.com/errata/RHSA-2013-0848.html http://www.osvdb.org/93566 http://secunia.com/advisories/53487	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-2236`	vulnerable	2026-06-08 04:54:12.397260	Details available The monitoring probe display in spacewalk-java before 2.1.148-1 and Red Hat Network (RHN) Satellite 4.0.0 through 4.2.0 and 5.1.0 through 5.3.0, and Proxy 5.3.0, allows remote authenticated users with permissions to administer monitoring probes to execute arbitrary code via unspecified vectors, related to backticks. Published: 2014-04-15T18:00:00.000Z Updated: 2024-08-07T02:25:07.611Z Open on db.gcve.eu Reference links http://secunia.com/advisories/56952 https://bugzilla.redhat.com/attachment.cgi?id=819987&action=diff https://git.fedorahosted.org/cgit/spacewalk.git/commit/?id=18c70164285cae0660fa3ac55c6656bb19b3b13f https://git.fedorahosted.org/cgit/spacewalk.git/commit/?id=c41c87a9dc9dac771eb761dd63ada05b2f9104f9 https://bugzilla.redhat.com/show_bug.cgi?id=607712	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-1171`	vulnerable	2026-06-08 04:54:05.925196	Details available Red Hat Network (RHN) Satellite 5.3 and 5.4 exposes a dangerous, obsolete XML-RPC API, which allows remote authenticated users to access arbitrary files and cause a denial of service (failed yum operations) via vectors related to configuration and package group (comps.xml) files for channels. Published: 2011-04-18T17:00:00.000Z Updated: 2024-08-07T01:14:06.685Z Open on db.gcve.eu Reference links http://secunia.com/advisories/44150 http://www.redhat.com/support/errata/RHSA-2011-0434.html http://www.securitytracker.com/id?1025316 https://exchange.xforce.ibmcloud.com/vulnerabilities/66690 http://www.securityfocus.com/bid/47316	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.