CVE-2009-0788

Severity: medium (CVSS 6.4 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2011-04-18 · updated 2026-06-16
Weakness: CWE-200

Description

Red Hat Network (RHN) Satellite Server 5.3 and 5.4 does not properly rewrite unspecified URLs, which allows remote attackers to (1) obtain unspecified sensitive host information or (2) use the server as an inadvertent proxy to connect to arbitrary services and IP addresses via unspecified vectors.

Affected products

RedHat Network Satellite Server: 5.3, 5.4

References

http://secunia.com/advisories/44150
http://www.redhat.com/support/errata/RHSA-2011-0434.html
http://www.securityfocus.com/bid/47316
http://www.securitytracker.com/id?1025316
http://www.vupen.com/english/advisories/2011/0967
https://bugzilla.redhat.com/show_bug.cgi?id=491365
https://exchange.xforce.ibmcloud.com/vulnerabilities/66691
http://secunia.com/advisories/44150
http://www.redhat.com/support/errata/RHSA-2011-0434.html
http://www.securityfocus.com/bid/47316
http://www.securitytracker.com/id?1025316
http://www.vupen.com/english/advisories/2011/0967

Get alerted when CVE-2009-0788 or the next vulnerability affects your stack