PT-2013-1497
CVE-2012-0435
·
Published
2013-01-26
·
Updated
2013-01-28
Description by
CVSS 2.0
5.8
MediumMetricsAV:N/AC:M/Au:N/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions
SUSE WebYaST versions prior to 1.2 0.2.63-0.6.1
Description
The issue allows remote attackers to modify the hosts list and subsequently conduct man-in-the-middle attacks via a crafted request on TCP port 4984 to the /host endpoint.
Recommendations
For versions prior to 1.2 0.2.63-0.6.1, update to version 1.2 0.2.63-0.6.1 or later to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾