PT-2013-1497
CVE-2012-0435
·
تاريخ النشر
2013-01-26
·
تاريخ التحديث
2013-01-28
الوصف من
CVSS 2.0
5.8
متوسطةالمقاييسAV:N/AC:M/Au:N/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions
SUSE WebYaST versions prior to 1.2 0.2.63-0.6.1
Description
The issue allows remote attackers to modify the hosts list and subsequently conduct man-in-the-middle attacks via a crafted request on TCP port 4984 to the /host endpoint.
Recommendations
For versions prior to 1.2 0.2.63-0.6.1, update to version 1.2 0.2.63-0.6.1 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾