CVE-2008-3270: Low severity red hat enterprise linux vulnerability
It was discovered that yum-rhn-plugin does not always properly verify SSL certificate against configured trusted CA certificate when communicating with Red Hat Network (RHN) server. SSL certificate was properly verified for XML-RPC communication, but the check was not applied to the file downloads.
This can possibly simplify man-in-the-middle attacks, allowing attacker to provide users with crafted repository meta-data files or RPM packages. However, GPG signatures are applied before installing any package, so an attacker could not use this to trick user to install packages from an untrusted source.
Other sources
yum-rhn-plugin in Red Hat Enterprise Linux (RHEL) 5 does not verify the SSL certificate for a file download from a Red Hat Network (RHN) server, which makes it easier for remote man-in-the-middle attackers to cause a denial of service (loss of updates) or force the download and installation of official Red Hat packages that were not requested.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-3270?
CVE-2008-3270 has a medium severity rating due to the risk of man-in-the-middle attacks when SSL certificates are not properly verified.
How do I fix CVE-2008-3270?
To fix CVE-2008-3270, ensure you update your yum-rhn-plugin to the latest version that includes proper SSL certificate verification.
What software is affected by CVE-2008-3270?
CVE-2008-3270 affects Red Hat Enterprise Linux 5.0 specifically.
What type of attacks can result from CVE-2008-3270?
CVE-2008-3270 can result in man-in-the-middle attacks due to inadequate SSL certificate verification during file downloads.
Is CVE-2008-3270 still a concern for current systems?
CVE-2008-3270 is less of a concern for current systems if they have been updated, but older versions may still be vulnerable.