A improper authentication using the HOST header in SUSE Linux SMT allows remote attackers to spoof a sibling server. Affected releases are SUSE Linux SMT: versions prior to 3.0.37.CreditsJake MillerReferenceshttps://bugzilla.suse.com/show_bug.cgi?id=1104076