Red Hat has issued an update for rhn-client-tools. This fixes a security issue, which can be exploited by malicious, local users to disclose sensitive information and manipulate certain data.

The security issue is caused due to the rhn-client-tools setting insecure permissions on "/var/spool/up2date/loginAuth.pkl". This can be exploited to disclose credentials for connecting to the Red Hat Network servers and manipulate package or action lists associated with the system's profile.

Solution
Updated packages are available via Red Hat Network.
Further details available to Secunia VIM customers

Provided and/or discovered by
Reported by the vendor.

Original Advisory
RHSA-2010:0449-1:
https://rhn.redhat.com/errata/RHSA-2010-0449.html

Deep Links
Links available to Secunia VIM customers