CVE-2010-1171

Red Hat Network (RHN) Satellite 5.3 and 5.4 exposes a dangerous, obsolete XML-RPC API, which allows remote authenticated users to access arbitrary files and cause a denial of service (failed yum operations) via vectors related to configuration and package group (comps.xml) files for channels.

• CWE-264

• http://secunia.com/advisories/44150Not Applicable
• http://www.redhat.com/support/errata/RHSA-2011-0434.htmlNot Applicable
• http://www.securityfocus.com/bid/47316Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1025316Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2011/0967Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=584118Issue Tracking, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/66690Third Party Advisory, VDB Entry
• http://secunia.com/advisories/44150Not Applicable
• http://www.redhat.com/support/errata/RHSA-2011-0434.htmlNot Applicable
• http://www.securityfocus.com/bid/47316Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1025316Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2011/0967Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=584118Issue Tracking, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/66690Third Party Advisory, VDB Entry

Published

Apr 18, 2011

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-1165Atlassian JIRA 3.12 through 4.1 allows remote authenticated …
• CVE-2010-1166The fbComposite function in fbpict.c in the Render extension…
• CVE-2010-1167fetchmail 4.6.3 through 6.3.16, when debug mode is enabled, …
• CVE-2010-1168The Safe (aka Safe.pm) module before 2.25 for Perl allows co…
• CVE-2010-1169PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before …
• CVE-2010-1170The PL/Tcl implementation in PostgreSQL 7.4 before 7.4.29, 8…
• CVE-2010-1172DBus-GLib 0.73 disregards the access flag of exported GObjec…
• CVE-2010-1173The sctp_process_unk_param function in net/sctp/sm_make_chun…
• CVE-2010-1174Cisco TFTP Server 1.1 allows remote attackers to cause a den…
• CVE-2010-1175Microsoft Internet Explorer 7.0 on Windows XP and Windows Se…
• CVE-2010-1176Safari on Apple iPhone OS 3.1.3 for iPod touch allows remote…
• CVE-2010-1177Safari on Apple iPhone OS 3.1.3 for iPod touch allows remote…