Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 515
Alerts This Week
Warning Icon 1 515

Moderate Security Advisory: Red Hat OpenStack Foreman SQL Injection Risk

red hat
Calendar Grey November 14, 2013
Scroller Redhat
Recent Foreman updates for Red Hat OpenStack tackle significant security vulnerabilities. Enhance the security of your environment by performing an upgrade today.
Updated Foreman packages that fix one security issue are now available for Red Hat OpenStack 3.0

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

Summary

The Foreman packages provide facilities for rapidly deploying Red Hat OpenStack 3.0. These packages are provided as a Technology Preview. For more information on the scope and nature of support for items marked as Technology Preview, refer to https://access.redhat.com/support/offerings/techpreview
It was found that Foreman did not correctly sanitize values of the "fqdn" and "hostgroup" parameters, allowing an attacker to provide a specially crafted value for these parameters and perform an SQL injection attack. (CVE-2013-4386)
This issue was discovered by Dominic Cleal of Red Hat.
Users of Foreman are advised to upgrade to these updated packages, which correct this issue. In Red Hat OpenStack, Foreman runs on the Apache HTTP Server using mod_passenger. As such, after installing the updated packages, the httpd service must be restarted ("service httpd restart") for this update to take effect.

Topics%20covered

Topics Covered

security advisory Red Hat update moderate impact SQL injection OpenStack Foreman

References

https://access.redhat.com/security/cve/CVE-2013-4386 https://access.redhat.com/security/updates/classification#moderate

Package List

OpenStack 3:
Source:
noarch: ruby193-foreman-1.1.10014-1.3.el6ost.noarch.rpm ruby193-foreman-mysql-1.1.10014-1.3.el6ost.noarch.rpm
These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key#package


Advisory ID: RHSA-2013:1522-01
Product: Red Hat OpenStack
Advisory URL: https://access.redhat.com/errata/RHSA-2013:1522.html
Issue date: 2013-11-14

Topic

Updated Foreman packages that fix one security issue are now available forRed Hat OpenStack 3.0.The Red Hat Security Response Team has rated this update as having moderatesecurity impact. A Common Vulnerability Scoring System (CVSS) base score,which gives a detailed severity rating, is available from the CVE link inthe References section.

Topics%20covered

Topics Covered

security advisory Red Hat update moderate impact SQL injection OpenStack Foreman

Relevant Releases Architectures

OpenStack 3 - noarch

Bugs Fixed

1013076 - CVE-2013-4386 Foreman: host and host group parameter SQL injection

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.