rhsa-2007:0983
Vulnerability from csaf_redhat
Published
2007-11-21 21:51
Modified
2025-08-01 19:54
Summary
Red Hat Security Advisory: conga security, bug fix, and enhancement update
Notes
Topic
<Updated 29th November 2007>
Packages have been updated to include PowerPC and xenU packages.
Updated conga packages that fix a security flaw, several bugs, and add
enhancements are now available for Red Hat Cluster Suite.
This update has been rated as having moderate security impact by the Red
Hat Security Response Team.
Details
The Conga package is a web-based administration tool for remote cluster and
storage management.
A flaw was found in ricci during a code audit. A remote attacker who is
able to connect to ricci could cause ricci to temporarily refuse additional
connections, resulting in a denial of service. (CVE-2007-4136)
Additionally, these updated packages fix the following bugs:
* entering an invalid password when creating a new cluster with the luci
web application caused a "UnboundLocalError" error.
* conga did not set the the "nodename" attribute for instances of manual
fencing, resulting in manual fencing being non-functional.
* conga did not provide a way to remove a dead node from a cluster.
Attempting to remove a dead node from a cluster resulted in an error,
reporting that that the node name cannot be reached.
* during cluster formation Conga reboots the cluster nodes. During reboot
errors about not being able to communicate with nodes are displayed. These
errors can safely be ignored, and have been removed in these updated
packages.
* when building a new cluster on Red Hat Enterprise Linux 4, Conga did not
generate node ID attributes for clusternode tags. The node ID attributes
are needed by programs such as qdisk.
* during Quorum Partition Configuration, a "TypeError" error occurred if
you did not configure heuristics.
* when passing arguments to fence_scsi, Conga used the "nodename" attribute
instead of the "node" attribute, resulting in an invalid XML file being
passed to fence_scsi. The "nodename" attribute is now supported.
* conga did not handle the restart operation correctly. In certain
situations this resulted in nodes not being started, stopped, and restarted
correctly. These issues were caused by clusters starting while others were
still in the process of stopping. This has been resolved in these updated
packages.
* probing storage using luci and the Mozilla Firefox 2 web browser on
Microsoft Windows XP appeared to never finish, when in fact it had. After
probing, clicking the node name in the storage list correctly showed the
storage for that node.
As well, these updated packages add the following enhancements:
* the Conga web interface now supports the Microsoft Internet Explorer web
browser, versions 6.0 and later.
* in previous packages, Conga required a minimum score to be configured
even when heuristics were not being used. A minimum score is no longer
required.
All Conga users are advised to upgrade to these updated packages, which
fix this vulnerability, resolve these issues, and add these enhancements.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "\u003cUpdated 29th November 2007\u003e\nPackages have been updated to include PowerPC and xenU packages.\n\nUpdated conga packages that fix a security flaw, several bugs, and add\nenhancements are now available for Red Hat Cluster Suite.\n\nThis update has been rated as having moderate security impact by the Red\nHat Security Response Team.",
"title": "Topic"
},
{
"category": "general",
"text": "The Conga package is a web-based administration tool for remote cluster and\nstorage management.\n\nA flaw was found in ricci during a code audit. A remote attacker who is\nable to connect to ricci could cause ricci to temporarily refuse additional\nconnections, resulting in a denial of service. (CVE-2007-4136)\n\nAdditionally, these updated packages fix the following bugs:\n\n* entering an invalid password when creating a new cluster with the luci\nweb application caused a \"UnboundLocalError\" error.\n\n* conga did not set the the \"nodename\" attribute for instances of manual\nfencing, resulting in manual fencing being non-functional.\n\n* conga did not provide a way to remove a dead node from a cluster.\nAttempting to remove a dead node from a cluster resulted in an error,\nreporting that that the node name cannot be reached.\n\n* during cluster formation Conga reboots the cluster nodes. During reboot\nerrors about not being able to communicate with nodes are displayed. These\nerrors can safely be ignored, and have been removed in these updated\npackages.\n\n* when building a new cluster on Red Hat Enterprise Linux 4, Conga did not\ngenerate node ID attributes for clusternode tags. The node ID attributes\nare needed by programs such as qdisk.\n\n* during Quorum Partition Configuration, a \"TypeError\" error occurred if\nyou did not configure heuristics.\n\n* when passing arguments to fence_scsi, Conga used the \"nodename\" attribute\ninstead of the \"node\" attribute, resulting in an invalid XML file being\npassed to fence_scsi. The \"nodename\" attribute is now supported.\n\n* conga did not handle the restart operation correctly. In certain\nsituations this resulted in nodes not being started, stopped, and restarted\ncorrectly. These issues were caused by clusters starting while others were\nstill in the process of stopping. This has been resolved in these updated\npackages.\n\n* probing storage using luci and the Mozilla Firefox 2 web browser on\nMicrosoft Windows XP appeared to never finish, when in fact it had. After\nprobing, clicking the node name in the storage list correctly showed the\nstorage for that node.\n\nAs well, these updated packages add the following enhancements:\n\n* the Conga web interface now supports the Microsoft Internet Explorer web\nbrowser, versions 6.0 and later.\n\n* in previous packages, Conga required a minimum score to be configured\neven when heuristics were not being used. A minimum score is no longer\nrequired.\n\nAll Conga users are advised to upgrade to these updated packages, which\nfix this vulnerability, resolve these issues, and add these enhancements.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2007:0983",
"url": "https://access.redhat.com/errata/RHSA-2007:0983"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "227723",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=227723"
},
{
"category": "external",
"summary": "238656",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=238656"
},
{
"category": "external",
"summary": "238727",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=238727"
},
{
"category": "external",
"summary": "241414",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=241414"
},
{
"category": "external",
"summary": "245200",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=245200"
},
{
"category": "external",
"summary": "253901",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=253901"
},
{
"category": "external",
"summary": "253905",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=253905"
},
{
"category": "external",
"summary": "253906",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=253906"
},
{
"category": "external",
"summary": "286951",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=286951"
},
{
"category": "external",
"summary": "325501",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=325501"
},
{
"category": "external",
"summary": "336101",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=336101"
},
{
"category": "external",
"summary": "340101",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=340101"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0983.json"
}
],
"title": "Red Hat Security Advisory: conga security, bug fix, and enhancement update",
"tracking": {
"current_release_date": "2025-08-01T19:54:51+00:00",
"generator": {
"date": "2025-08-01T19:54:51+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.6"
}
},
"id": "RHSA-2007:0983",
"initial_release_date": "2007-11-21T21:51:00+00:00",
"revision_history": [
{
"date": "2007-11-21T21:51:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2007-11-29T12:36:39+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-08-01T19:54:51+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Cluster Suite 4AS",
"product": {
"name": "Red Hat Cluster Suite 4AS",
"product_id": "4AS-cluster",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_cluster:4"
}
}
},
{
"category": "product_name",
"name": "Red Hat Cluster Suite 4ES",
"product": {
"name": "Red Hat Cluster Suite 4ES",
"product_id": "4ES-cluster",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_cluster:4"
}
}
},
{
"category": "product_name",
"name": "Red Hat Cluster Suite 4WS",
"product": {
"name": "Red Hat Cluster Suite 4WS",
"product_id": "4WS-cluster",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_cluster:4"
}
}
}
],
"category": "product_family",
"name": "Red Hat Cluster Suite"
},
{
"branches": [
{
"category": "product_version",
"name": "ricci-0:0.11.0-3.ia64",
"product": {
"name": "ricci-0:0.11.0-3.ia64",
"product_id": "ricci-0:0.11.0-3.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ricci@0.11.0-3?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "conga-debuginfo-0:0.11.0-3.ia64",
"product": {
"name": "conga-debuginfo-0:0.11.0-3.ia64",
"product_id": "conga-debuginfo-0:0.11.0-3.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/conga-debuginfo@0.11.0-3?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "luci-0:0.11.0-3.ia64",
"product": {
"name": "luci-0:0.11.0-3.ia64",
"product_id": "luci-0:0.11.0-3.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/luci@0.11.0-3?arch=ia64"
}
}
}
],
"category": "architecture",
"name": "ia64"
},
{
"branches": [
{
"category": "product_version",
"name": "ricci-0:0.11.0-3.x86_64",
"product": {
"name": "ricci-0:0.11.0-3.x86_64",
"product_id": "ricci-0:0.11.0-3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ricci@0.11.0-3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "conga-debuginfo-0:0.11.0-3.x86_64",
"product": {
"name": "conga-debuginfo-0:0.11.0-3.x86_64",
"product_id": "conga-debuginfo-0:0.11.0-3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/conga-debuginfo@0.11.0-3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "luci-0:0.11.0-3.x86_64",
"product": {
"name": "luci-0:0.11.0-3.x86_64",
"product_id": "luci-0:0.11.0-3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/luci@0.11.0-3?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "ricci-0:0.11.0-3.i386",
"product": {
"name": "ricci-0:0.11.0-3.i386",
"product_id": "ricci-0:0.11.0-3.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ricci@0.11.0-3?arch=i386"
}
}
},
{
"category": "product_version",
"name": "conga-debuginfo-0:0.11.0-3.i386",
"product": {
"name": "conga-debuginfo-0:0.11.0-3.i386",
"product_id": "conga-debuginfo-0:0.11.0-3.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/conga-debuginfo@0.11.0-3?arch=i386"
}
}
},
{
"category": "product_version",
"name": "luci-0:0.11.0-3.i386",
"product": {
"name": "luci-0:0.11.0-3.i386",
"product_id": "luci-0:0.11.0-3.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/luci@0.11.0-3?arch=i386"
}
}
}
],
"category": "architecture",
"name": "i386"
},
{
"branches": [
{
"category": "product_version",
"name": "conga-0:0.11.0-3.src",
"product": {
"name": "conga-0:0.11.0-3.src",
"product_id": "conga-0:0.11.0-3.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/conga@0.11.0-3?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "ricci-0:0.11.0-3.ppc",
"product": {
"name": "ricci-0:0.11.0-3.ppc",
"product_id": "ricci-0:0.11.0-3.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ricci@0.11.0-3?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "conga-debuginfo-0:0.11.0-3.ppc",
"product": {
"name": "conga-debuginfo-0:0.11.0-3.ppc",
"product_id": "conga-debuginfo-0:0.11.0-3.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/conga-debuginfo@0.11.0-3?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "luci-0:0.11.0-3.ppc",
"product": {
"name": "luci-0:0.11.0-3.ppc",
"product_id": "luci-0:0.11.0-3.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/luci@0.11.0-3?arch=ppc"
}
}
}
],
"category": "architecture",
"name": "ppc"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "conga-0:0.11.0-3.src as a component of Red Hat Cluster Suite 4AS",
"product_id": "4AS-cluster:conga-0:0.11.0-3.src"
},
"product_reference": "conga-0:0.11.0-3.src",
"relates_to_product_reference": "4AS-cluster"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conga-debuginfo-0:0.11.0-3.i386 as a component of Red Hat Cluster Suite 4AS",
"product_id": "4AS-cluster:conga-debuginfo-0:0.11.0-3.i386"
},
"product_reference": "conga-debuginfo-0:0.11.0-3.i386",
"relates_to_product_reference": "4AS-cluster"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conga-debuginfo-0:0.11.0-3.ia64 as a component of Red Hat Cluster Suite 4AS",
"product_id": "4AS-cluster:conga-debuginfo-0:0.11.0-3.ia64"
},
"product_reference": "conga-debuginfo-0:0.11.0-3.ia64",
"relates_to_product_reference": "4AS-cluster"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conga-debuginfo-0:0.11.0-3.ppc as a component of Red Hat Cluster Suite 4AS",
"product_id": "4AS-cluster:conga-debuginfo-0:0.11.0-3.ppc"
},
"product_reference": "conga-debuginfo-0:0.11.0-3.ppc",
"relates_to_product_reference": "4AS-cluster"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conga-debuginfo-0:0.11.0-3.x86_64 as a component of Red Hat Cluster Suite 4AS",
"product_id": "4AS-cluster:conga-debuginfo-0:0.11.0-3.x86_64"
},
"product_reference": "conga-debuginfo-0:0.11.0-3.x86_64",
"relates_to_product_reference": "4AS-cluster"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "luci-0:0.11.0-3.i386 as a component of Red Hat Cluster Suite 4AS",
"product_id": "4AS-cluster:luci-0:0.11.0-3.i386"
},
"product_reference": "luci-0:0.11.0-3.i386",
"relates_to_product_reference": "4AS-cluster"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "luci-0:0.11.0-3.ia64 as a component of Red Hat Cluster Suite 4AS",
"product_id": "4AS-cluster:luci-0:0.11.0-3.ia64"
},
"product_reference": "luci-0:0.11.0-3.ia64",
"relates_to_product_reference": "4AS-cluster"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "luci-0:0.11.0-3.ppc as a component of Red Hat Cluster Suite 4AS",
"product_id": "4AS-cluster:luci-0:0.11.0-3.ppc"
},
"product_reference": "luci-0:0.11.0-3.ppc",
"relates_to_product_reference": "4AS-cluster"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "luci-0:0.11.0-3.x86_64 as a component of Red Hat Cluster Suite 4AS",
"product_id": "4AS-cluster:luci-0:0.11.0-3.x86_64"
},
"product_reference": "luci-0:0.11.0-3.x86_64",
"relates_to_product_reference": "4AS-cluster"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ricci-0:0.11.0-3.i386 as a component of Red Hat Cluster Suite 4AS",
"product_id": "4AS-cluster:ricci-0:0.11.0-3.i386"
},
"product_reference": "ricci-0:0.11.0-3.i386",
"relates_to_product_reference": "4AS-cluster"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ricci-0:0.11.0-3.ia64 as a component of Red Hat Cluster Suite 4AS",
"product_id": "4AS-cluster:ricci-0:0.11.0-3.ia64"
},
"product_reference": "ricci-0:0.11.0-3.ia64",
"relates_to_product_reference": "4AS-cluster"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ricci-0:0.11.0-3.ppc as a component of Red Hat Cluster Suite 4AS",
"product_id": "4AS-cluster:ricci-0:0.11.0-3.ppc"
},
"product_reference": "ricci-0:0.11.0-3.ppc",
"relates_to_product_reference": "4AS-cluster"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ricci-0:0.11.0-3.x86_64 as a component of Red Hat Cluster Suite 4AS",
"product_id": "4AS-cluster:ricci-0:0.11.0-3.x86_64"
},
"product_reference": "ricci-0:0.11.0-3.x86_64",
"relates_to_product_reference": "4AS-cluster"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conga-0:0.11.0-3.src as a component of Red Hat Cluster Suite 4ES",
"product_id": "4ES-cluster:conga-0:0.11.0-3.src"
},
"product_reference": "conga-0:0.11.0-3.src",
"relates_to_product_reference": "4ES-cluster"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conga-debuginfo-0:0.11.0-3.i386 as a component of Red Hat Cluster Suite 4ES",
"product_id": "4ES-cluster:conga-debuginfo-0:0.11.0-3.i386"
},
"product_reference": "conga-debuginfo-0:0.11.0-3.i386",
"relates_to_product_reference": "4ES-cluster"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conga-debuginfo-0:0.11.0-3.ia64 as a component of Red Hat Cluster Suite 4ES",
"product_id": "4ES-cluster:conga-debuginfo-0:0.11.0-3.ia64"
},
"product_reference": "conga-debuginfo-0:0.11.0-3.ia64",
"relates_to_product_reference": "4ES-cluster"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conga-debuginfo-0:0.11.0-3.ppc as a component of Red Hat Cluster Suite 4ES",
"product_id": "4ES-cluster:conga-debuginfo-0:0.11.0-3.ppc"
},
"product_reference": "conga-debuginfo-0:0.11.0-3.ppc",
"relates_to_product_reference": "4ES-cluster"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conga-debuginfo-0:0.11.0-3.x86_64 as a component of Red Hat Cluster Suite 4ES",
"product_id": "4ES-cluster:conga-debuginfo-0:0.11.0-3.x86_64"
},
"product_reference": "conga-debuginfo-0:0.11.0-3.x86_64",
"relates_to_product_reference": "4ES-cluster"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "luci-0:0.11.0-3.i386 as a component of Red Hat Cluster Suite 4ES",
"product_id": "4ES-cluster:luci-0:0.11.0-3.i386"
},
"product_reference": "luci-0:0.11.0-3.i386",
"relates_to_product_reference": "4ES-cluster"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "luci-0:0.11.0-3.ia64 as a component of Red Hat Cluster Suite 4ES",
"product_id": "4ES-cluster:luci-0:0.11.0-3.ia64"
},
"product_reference": "luci-0:0.11.0-3.ia64",
"relates_to_product_reference": "4ES-cluster"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "luci-0:0.11.0-3.ppc as a component of Red Hat Cluster Suite 4ES",
"product_id": "4ES-cluster:luci-0:0.11.0-3.ppc"
},
"product_reference": "luci-0:0.11.0-3.ppc",
"relates_to_product_reference": "4ES-cluster"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "luci-0:0.11.0-3.x86_64 as a component of Red Hat Cluster Suite 4ES",
"product_id": "4ES-cluster:luci-0:0.11.0-3.x86_64"
},
"product_reference": "luci-0:0.11.0-3.x86_64",
"relates_to_product_reference": "4ES-cluster"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ricci-0:0.11.0-3.i386 as a component of Red Hat Cluster Suite 4ES",
"product_id": "4ES-cluster:ricci-0:0.11.0-3.i386"
},
"product_reference": "ricci-0:0.11.0-3.i386",
"relates_to_product_reference": "4ES-cluster"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ricci-0:0.11.0-3.ia64 as a component of Red Hat Cluster Suite 4ES",
"product_id": "4ES-cluster:ricci-0:0.11.0-3.ia64"
},
"product_reference": "ricci-0:0.11.0-3.ia64",
"relates_to_product_reference": "4ES-cluster"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ricci-0:0.11.0-3.ppc as a component of Red Hat Cluster Suite 4ES",
"product_id": "4ES-cluster:ricci-0:0.11.0-3.ppc"
},
"product_reference": "ricci-0:0.11.0-3.ppc",
"relates_to_product_reference": "4ES-cluster"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ricci-0:0.11.0-3.x86_64 as a component of Red Hat Cluster Suite 4ES",
"product_id": "4ES-cluster:ricci-0:0.11.0-3.x86_64"
},
"product_reference": "ricci-0:0.11.0-3.x86_64",
"relates_to_product_reference": "4ES-cluster"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conga-0:0.11.0-3.src as a component of Red Hat Cluster Suite 4WS",
"product_id": "4WS-cluster:conga-0:0.11.0-3.src"
},
"product_reference": "conga-0:0.11.0-3.src",
"relates_to_product_reference": "4WS-cluster"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conga-debuginfo-0:0.11.0-3.i386 as a component of Red Hat Cluster Suite 4WS",
"product_id": "4WS-cluster:conga-debuginfo-0:0.11.0-3.i386"
},
"product_reference": "conga-debuginfo-0:0.11.0-3.i386",
"relates_to_product_reference": "4WS-cluster"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conga-debuginfo-0:0.11.0-3.ia64 as a component of Red Hat Cluster Suite 4WS",
"product_id": "4WS-cluster:conga-debuginfo-0:0.11.0-3.ia64"
},
"product_reference": "conga-debuginfo-0:0.11.0-3.ia64",
"relates_to_product_reference": "4WS-cluster"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conga-debuginfo-0:0.11.0-3.ppc as a component of Red Hat Cluster Suite 4WS",
"product_id": "4WS-cluster:conga-debuginfo-0:0.11.0-3.ppc"
},
"product_reference": "conga-debuginfo-0:0.11.0-3.ppc",
"relates_to_product_reference": "4WS-cluster"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conga-debuginfo-0:0.11.0-3.x86_64 as a component of Red Hat Cluster Suite 4WS",
"product_id": "4WS-cluster:conga-debuginfo-0:0.11.0-3.x86_64"
},
"product_reference": "conga-debuginfo-0:0.11.0-3.x86_64",
"relates_to_product_reference": "4WS-cluster"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "luci-0:0.11.0-3.i386 as a component of Red Hat Cluster Suite 4WS",
"product_id": "4WS-cluster:luci-0:0.11.0-3.i386"
},
"product_reference": "luci-0:0.11.0-3.i386",
"relates_to_product_reference": "4WS-cluster"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "luci-0:0.11.0-3.ia64 as a component of Red Hat Cluster Suite 4WS",
"product_id": "4WS-cluster:luci-0:0.11.0-3.ia64"
},
"product_reference": "luci-0:0.11.0-3.ia64",
"relates_to_product_reference": "4WS-cluster"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "luci-0:0.11.0-3.ppc as a component of Red Hat Cluster Suite 4WS",
"product_id": "4WS-cluster:luci-0:0.11.0-3.ppc"
},
"product_reference": "luci-0:0.11.0-3.ppc",
"relates_to_product_reference": "4WS-cluster"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "luci-0:0.11.0-3.x86_64 as a component of Red Hat Cluster Suite 4WS",
"product_id": "4WS-cluster:luci-0:0.11.0-3.x86_64"
},
"product_reference": "luci-0:0.11.0-3.x86_64",
"relates_to_product_reference": "4WS-cluster"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ricci-0:0.11.0-3.i386 as a component of Red Hat Cluster Suite 4WS",
"product_id": "4WS-cluster:ricci-0:0.11.0-3.i386"
},
"product_reference": "ricci-0:0.11.0-3.i386",
"relates_to_product_reference": "4WS-cluster"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ricci-0:0.11.0-3.ia64 as a component of Red Hat Cluster Suite 4WS",
"product_id": "4WS-cluster:ricci-0:0.11.0-3.ia64"
},
"product_reference": "ricci-0:0.11.0-3.ia64",
"relates_to_product_reference": "4WS-cluster"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ricci-0:0.11.0-3.ppc as a component of Red Hat Cluster Suite 4WS",
"product_id": "4WS-cluster:ricci-0:0.11.0-3.ppc"
},
"product_reference": "ricci-0:0.11.0-3.ppc",
"relates_to_product_reference": "4WS-cluster"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ricci-0:0.11.0-3.x86_64 as a component of Red Hat Cluster Suite 4WS",
"product_id": "4WS-cluster:ricci-0:0.11.0-3.x86_64"
},
"product_reference": "ricci-0:0.11.0-3.x86_64",
"relates_to_product_reference": "4WS-cluster"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2007-4136",
"discovery_date": "2007-08-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "336101"
}
],
"notes": [
{
"category": "description",
"text": "The ricci daemon in Red Hat Conga 0.10.0 allows remote attackers to cause a denial of service (loss of new connections) by repeatedly sending data or attempting connections.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ricci is vulnerable to a connect DoS attack",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"4AS-cluster:conga-0:0.11.0-3.src",
"4AS-cluster:conga-debuginfo-0:0.11.0-3.i386",
"4AS-cluster:conga-debuginfo-0:0.11.0-3.ia64",
"4AS-cluster:conga-debuginfo-0:0.11.0-3.ppc",
"4AS-cluster:conga-debuginfo-0:0.11.0-3.x86_64",
"4AS-cluster:luci-0:0.11.0-3.i386",
"4AS-cluster:luci-0:0.11.0-3.ia64",
"4AS-cluster:luci-0:0.11.0-3.ppc",
"4AS-cluster:luci-0:0.11.0-3.x86_64",
"4AS-cluster:ricci-0:0.11.0-3.i386",
"4AS-cluster:ricci-0:0.11.0-3.ia64",
"4AS-cluster:ricci-0:0.11.0-3.ppc",
"4AS-cluster:ricci-0:0.11.0-3.x86_64",
"4ES-cluster:conga-0:0.11.0-3.src",
"4ES-cluster:conga-debuginfo-0:0.11.0-3.i386",
"4ES-cluster:conga-debuginfo-0:0.11.0-3.ia64",
"4ES-cluster:conga-debuginfo-0:0.11.0-3.ppc",
"4ES-cluster:conga-debuginfo-0:0.11.0-3.x86_64",
"4ES-cluster:luci-0:0.11.0-3.i386",
"4ES-cluster:luci-0:0.11.0-3.ia64",
"4ES-cluster:luci-0:0.11.0-3.ppc",
"4ES-cluster:luci-0:0.11.0-3.x86_64",
"4ES-cluster:ricci-0:0.11.0-3.i386",
"4ES-cluster:ricci-0:0.11.0-3.ia64",
"4ES-cluster:ricci-0:0.11.0-3.ppc",
"4ES-cluster:ricci-0:0.11.0-3.x86_64",
"4WS-cluster:conga-0:0.11.0-3.src",
"4WS-cluster:conga-debuginfo-0:0.11.0-3.i386",
"4WS-cluster:conga-debuginfo-0:0.11.0-3.ia64",
"4WS-cluster:conga-debuginfo-0:0.11.0-3.ppc",
"4WS-cluster:conga-debuginfo-0:0.11.0-3.x86_64",
"4WS-cluster:luci-0:0.11.0-3.i386",
"4WS-cluster:luci-0:0.11.0-3.ia64",
"4WS-cluster:luci-0:0.11.0-3.ppc",
"4WS-cluster:luci-0:0.11.0-3.x86_64",
"4WS-cluster:ricci-0:0.11.0-3.i386",
"4WS-cluster:ricci-0:0.11.0-3.ia64",
"4WS-cluster:ricci-0:0.11.0-3.ppc",
"4WS-cluster:ricci-0:0.11.0-3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2007-4136"
},
{
"category": "external",
"summary": "RHBZ#336101",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=336101"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2007-4136",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-4136"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-4136",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2007-4136"
}
],
"release_date": "2007-10-31T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2007-11-21T21:51:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
"product_ids": [
"4AS-cluster:conga-0:0.11.0-3.src",
"4AS-cluster:conga-debuginfo-0:0.11.0-3.i386",
"4AS-cluster:conga-debuginfo-0:0.11.0-3.ia64",
"4AS-cluster:conga-debuginfo-0:0.11.0-3.ppc",
"4AS-cluster:conga-debuginfo-0:0.11.0-3.x86_64",
"4AS-cluster:luci-0:0.11.0-3.i386",
"4AS-cluster:luci-0:0.11.0-3.ia64",
"4AS-cluster:luci-0:0.11.0-3.ppc",
"4AS-cluster:luci-0:0.11.0-3.x86_64",
"4AS-cluster:ricci-0:0.11.0-3.i386",
"4AS-cluster:ricci-0:0.11.0-3.ia64",
"4AS-cluster:ricci-0:0.11.0-3.ppc",
"4AS-cluster:ricci-0:0.11.0-3.x86_64",
"4ES-cluster:conga-0:0.11.0-3.src",
"4ES-cluster:conga-debuginfo-0:0.11.0-3.i386",
"4ES-cluster:conga-debuginfo-0:0.11.0-3.ia64",
"4ES-cluster:conga-debuginfo-0:0.11.0-3.ppc",
"4ES-cluster:conga-debuginfo-0:0.11.0-3.x86_64",
"4ES-cluster:luci-0:0.11.0-3.i386",
"4ES-cluster:luci-0:0.11.0-3.ia64",
"4ES-cluster:luci-0:0.11.0-3.ppc",
"4ES-cluster:luci-0:0.11.0-3.x86_64",
"4ES-cluster:ricci-0:0.11.0-3.i386",
"4ES-cluster:ricci-0:0.11.0-3.ia64",
"4ES-cluster:ricci-0:0.11.0-3.ppc",
"4ES-cluster:ricci-0:0.11.0-3.x86_64",
"4WS-cluster:conga-0:0.11.0-3.src",
"4WS-cluster:conga-debuginfo-0:0.11.0-3.i386",
"4WS-cluster:conga-debuginfo-0:0.11.0-3.ia64",
"4WS-cluster:conga-debuginfo-0:0.11.0-3.ppc",
"4WS-cluster:conga-debuginfo-0:0.11.0-3.x86_64",
"4WS-cluster:luci-0:0.11.0-3.i386",
"4WS-cluster:luci-0:0.11.0-3.ia64",
"4WS-cluster:luci-0:0.11.0-3.ppc",
"4WS-cluster:luci-0:0.11.0-3.x86_64",
"4WS-cluster:ricci-0:0.11.0-3.i386",
"4WS-cluster:ricci-0:0.11.0-3.ia64",
"4WS-cluster:ricci-0:0.11.0-3.ppc",
"4WS-cluster:ricci-0:0.11.0-3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2007:0983"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "ADJACENT_NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 3.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:A/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"4AS-cluster:conga-0:0.11.0-3.src",
"4AS-cluster:conga-debuginfo-0:0.11.0-3.i386",
"4AS-cluster:conga-debuginfo-0:0.11.0-3.ia64",
"4AS-cluster:conga-debuginfo-0:0.11.0-3.ppc",
"4AS-cluster:conga-debuginfo-0:0.11.0-3.x86_64",
"4AS-cluster:luci-0:0.11.0-3.i386",
"4AS-cluster:luci-0:0.11.0-3.ia64",
"4AS-cluster:luci-0:0.11.0-3.ppc",
"4AS-cluster:luci-0:0.11.0-3.x86_64",
"4AS-cluster:ricci-0:0.11.0-3.i386",
"4AS-cluster:ricci-0:0.11.0-3.ia64",
"4AS-cluster:ricci-0:0.11.0-3.ppc",
"4AS-cluster:ricci-0:0.11.0-3.x86_64",
"4ES-cluster:conga-0:0.11.0-3.src",
"4ES-cluster:conga-debuginfo-0:0.11.0-3.i386",
"4ES-cluster:conga-debuginfo-0:0.11.0-3.ia64",
"4ES-cluster:conga-debuginfo-0:0.11.0-3.ppc",
"4ES-cluster:conga-debuginfo-0:0.11.0-3.x86_64",
"4ES-cluster:luci-0:0.11.0-3.i386",
"4ES-cluster:luci-0:0.11.0-3.ia64",
"4ES-cluster:luci-0:0.11.0-3.ppc",
"4ES-cluster:luci-0:0.11.0-3.x86_64",
"4ES-cluster:ricci-0:0.11.0-3.i386",
"4ES-cluster:ricci-0:0.11.0-3.ia64",
"4ES-cluster:ricci-0:0.11.0-3.ppc",
"4ES-cluster:ricci-0:0.11.0-3.x86_64",
"4WS-cluster:conga-0:0.11.0-3.src",
"4WS-cluster:conga-debuginfo-0:0.11.0-3.i386",
"4WS-cluster:conga-debuginfo-0:0.11.0-3.ia64",
"4WS-cluster:conga-debuginfo-0:0.11.0-3.ppc",
"4WS-cluster:conga-debuginfo-0:0.11.0-3.x86_64",
"4WS-cluster:luci-0:0.11.0-3.i386",
"4WS-cluster:luci-0:0.11.0-3.ia64",
"4WS-cluster:luci-0:0.11.0-3.ppc",
"4WS-cluster:luci-0:0.11.0-3.x86_64",
"4WS-cluster:ricci-0:0.11.0-3.i386",
"4WS-cluster:ricci-0:0.11.0-3.ia64",
"4WS-cluster:ricci-0:0.11.0-3.ppc",
"4WS-cluster:ricci-0:0.11.0-3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "ricci is vulnerable to a connect DoS attack"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…