CVE:CVE-2012-6137
CNNVD:CNNVD-201305-108
Red Hat Subscription Manager是美国红帽（Red Hat）公司的一款订阅管理工具。
Red Hat subscription-manager中的rhn-migrate-classic-to-rhsm工具中存在漏洞，该漏洞源于程序转移至基于证书的Red Hat网络期间没有正确验证Red Hat Network Classic服务器的X.509证书。远程中间人攻击者可利用该漏洞获得敏感信息，如用户证书。
solution:Upgrade redhat enterprise_linux to a higher version than 5,and avoid the version 5; Upgrade redhat enterprise_linux_desktop to a higher version than 5.0,6.0,and avoid the version 5.0,6.0; Upgrade redhat enterprise_linux_eus to a higher version than 5.9.z,and avoid the version 5.9.z; Upgrade redhat enterprise_linux_hpc_node to a higher version than 6,and avoid the version 6; Upgrade redhat enterprise_linux_long_life to a higher version than 5.9,and avoid the version 5.9; Upgrade redhat enterprise_linux_server to a higher version than 6.0,and avoid the version 6.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 6.4,and avoid the version 6.4; Upgrade redhat enterprise_linux_server_eus to a higher version than 6.4.z,and avoid the version 6.4.z; Upgrade redhat enterprise_linux_workstation to a higher version than 6.0,and avoid the version 6.0