Bug 585386 (CVE-2010-1439)

Summary:	CVE-2010-1439 rhn-client-tools: authorized information disclosure
Product:	[Other] Security Response	Reporter:	Vincent Danen <vdanen>
Component:	vulnerability	Assignee:	Red Hat Product Security <security-response-team>
Status:	CLOSED ERRATA	QA Contact:	Petr Sklenar <psklenar>
Severity:	medium	Docs Contact:
Priority:	medium
Version:	unspecified	CC:	mjc, mmraka, msuchy, mzazrivec, psklenar, security-response-team
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2011-06-15 22:22:59 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	586737, 586738, 586739, 598642
Bug Blocks:

Description Vincent Danen 2010-04-23 20:37:53 UTC

It was found that the yum-rhn-plugin caches sensitive authentication information in the world-readable /var/spool/up2date/loginAuth.pkl file.  This information could be used to download packages from Red Hat Network (Hosted or Satellite) or otherwise manipulate the package list associated with the system's profile, which could possibly prevent new errata from being installed.

Comment 12 errata-xmlrpc 2010-06-01 18:54:43 UTC

This issue has been addressed in following products:

  Red Hat Enterprise Linux 5

Via RHSA-2010:0449 https://rhn.redhat.com/errata/RHSA-2010-0449.html

Comment 13 Vincent Danen 2010-06-01 18:55:28 UTC

Created rhn-client-tools tracking bugs for this issue

Affects: fedora-all [bug 598642]

Comment 14 Vincent Danen 2011-06-15 22:22:59 UTC

This was corrected in Fedora 14:

* Thu Apr 29 2010 Miroslav Suchý <msuchy> 1.1.2-1
- 585386 - do not fail if file do not exist