Novell SUSE Manager

ソフト名：Novell SUSE Manager 1.x (jabberd 2.2.14未満)

回避策：SUSE-SU-2011:0741-1にて対応

脆弱性：DoS攻撃, CPUリソースの浪費, メモリの浪費

ソース：http://www.novell.com/documentation/suse_manager/

https://hermes.opensuse.org/messages/9197650

http://secunia.com/advisories/44787/

http://secunia.com/advisories/45112/

http://dvw-j.blogspot.com/2011/06/jabberd-debian-gnulinux.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1755

CVE：CVE-2011-1755

危険性：Medium Risk

Red Hat Network Satellite Server, Novell SUSE Manager

ソフト名：Red Hat Network Satellite Server 5.x, Novell SUSE Manager 1.x

回避策：RHSA-2011:0879-01にて対応, SUSE-SU-2011:0653-1にて対応

脆弱性：XSS, CSRF, 不正HTTPのリクエスト, 不正アクションの実行, スプーフィング, リダイレクト脆弱性

ソース：http://www.redhat.com/

http://www.novell.com/documentation/suse_manager/

https://rhn.redhat.com/errata/RHSA-2011-0879.html

https://hermes.opensuse.org/messages/8898155

http://thetoms-random-thoughts.blogspot.com/2011/06/suse-manager-security-update.html

http://secunia.com/advisories/44959/

http://secunia.com/advisories/45010/

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4139

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1594

CVE：CVE-2009-4139, CVE-2011-1594

危険性：Medium Risk

Novell SUSE Manager

ソフト名：Novell SUSE Manager 1.x (Red Hat Network Satellite Server 5.x)

回避策：SUSE-SU-2011:0577-1にて対応

脆弱性：セキュリティ制限の回避, 機密情報の奪取, DoS攻撃, 不正アクションの実行, 不正HTTPのリクエスト, 不正アクセス

ソース：http://www.novell.com/documentation/suse_manager/

https://hermes.opensuse.org/messages/8639128

http://secunia.com/advisories/44150/

http://secunia.com/advisories/44803/

http://dvw-j.blogspot.com/2011/04/red-hat-network-satellite-server.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0788

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1171

CVE：CVE-2009-0788, CVE-2010-1171

危険性：Medium Risk