CVE-2008-3270
First published: Tue Jul 29 2008(Updated: )
It was discovered that yum-rhn-plugin does not always properly verify SSL certificate against configured trusted CA certificate when communicating with Red Hat Network (RHN) server. SSL certificate was properly verified for XML-RPC communication, but the check was not applied to the file downloads. This can possibly simplify man-in-the-middle attacks, allowing attacker to provide users with crafted repository meta-data files or RPM packages. However, GPG signatures are applied before installing any package, so an attacker could not use this to trick user to install packages from an untrusted source.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Red Hat Enterprise Linux | =5.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://bugzilla.redhat.com/show_bug.cgi?id=457113
- http://www.redhat.com/support/errata/RHSA-2008-0815.html
- http://www.securityfocus.com/bid/30695
- http://securitytracker.com/id?1020698
- http://secunia.com/advisories/31472
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10864
- http://rhn.redhat.com/errata/RHSA-2008-0815.html
Frequently Asked Questions
What is the severity of CVE-2008-3270?
CVE-2008-3270 has a medium severity rating due to the risk of man-in-the-middle attacks when SSL certificates are not properly verified.
How do I fix CVE-2008-3270?
To fix CVE-2008-3270, ensure you update your yum-rhn-plugin to the latest version that includes proper SSL certificate verification.
What software is affected by CVE-2008-3270?
CVE-2008-3270 affects Red Hat Enterprise Linux 5.0 specifically.
What type of attacks can result from CVE-2008-3270?
CVE-2008-3270 can result in man-in-the-middle attacks due to inadequate SSL certificate verification during file downloads.
Is CVE-2008-3270 still a concern for current systems?
CVE-2008-3270 is less of a concern for current systems if they have been updated, but older versions may still be vulnerable.
- agent/type
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/references
- agent/author
- agent/weakness
- agent/last-modified-date
- agent/event
- agent/description
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2008-3270
- agent/trending
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- agent/softwarecombine
- agent/tags
- agent/source
- vendor/redhat
- canonical/red hat enterprise linux
- version/red hat enterprise linux/5.0