CVE-2008-3270: Red Hat Enterprise Linux

Low severity, CVSS 2.6. EPSS: 0.8% chance of exploitation in the next 30 days.

yum-rhn-plugin in Red Hat Enterprise Linux (RHEL) 5 does not verify the SSL certificate for a file download from a Red Hat Network (RHN) server, which makes it easier for remote man-in-the-middle attackers to cause a denial of service (loss of updates) or force the download and installation of official Red Hat packages that were not requested.

Affected products

• Red Hat Enterprise Linux: version 5.0 only

Published 2008-08-18. Last modified 2026-06-16.