Red Hat has issued an update for Red Hat Network Satellite Server. This fixes some vulnerabilities, which can be exploited by malicious users to disclose potentially sensitive information, and malicious people to bypass certain security restrictions, disclose sensitive information, conduct cross-site scripting attacks, and cause a DoS (Denial of Service).

For more information:
SA18485
SA18755
SA24678
SA25721
SA27398
SA27959

1) A vulnerability is caused due to the manzier.pxt XML-RPC script using a hard-coded authentication token. This can be exploited to disclose certain information (e.g. login names, email addresses, user IDs, and information about entitlements).

Solution
Update to Red Hat Network Satellite Server version 5.1.1. Updated packages are available via the Red Hat Network.
Further details available to Secunia VIM customers

Provided and/or discovered by
1) Reported by the vendor.

Original Advisory
https://rhn.redhat.com/errata/RHSA-2008-0630.html

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers