CVE-2008-3270

Severity CVSS v4.0:
Pending analysis
Type:
CWE-310 Cryptographic Issues
Publication date:
18/08/2008
Last modified:
09/04/2025

Description

yum-rhn-plugin in Red Hat Enterprise Linux (RHEL) 5 does not verify the SSL certificate for a file download from a Red Hat Network (RHN) server, which makes it easier for remote man-in-the-middle attackers to cause a denial of service (loss of updates) or force the download and installation of official Red Hat packages that were not requested.

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*