PT-2011-1448 · Suse · Suse Linux Enterprise

Publicado 2011-01-12 · Atualizado 2017-08-17 · CVE-2010-3912

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions SUSE Linux Enterprise versions 10 SP3 and 11 SP1

Description The supportconfig script in supportutils does not properly disguise passwords in configuration files. The impact and attack vectors of this issue are not specified.

Recommendations For SUSE Linux Enterprise version 10 SP3, update the supportutils package to a version that properly disguises passwords in configuration files. For SUSE Linux Enterprise version 11 SP1, update the supportutils package to a version that properly disguises passwords in configuration files. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

CVE-2010-3912

Produtos afetados

Suse Linux Enterprise

Referências · 6

• https://exchange.xforce.ibmcloud.com/vulnerabilities/64690 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-3912 · Nota de Segurança
• http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00003.html · Aviso do Fabricante
• http://vupen.com/english/advisories/2011/0076 · Nota
• http://secunia.com/advisories/42877 · Nota
• http://osvdb.org/70405 · Nota