PT-2014-5611 · Red Hat+1 · Red Hat Sos+1

Dolev Farhi · Publicado 2014-06-01 · Atualizado 2016-04-06 · CVE-2014-3925

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Red Hat sos versions 1.7 and earlier

Description The issue concerns the sosreport in Red Hat sos, which generates an archive that may contain cleartext passwords in the fstab file. This archive lacks a warning about reviewing its contents to detect included passwords. As a result, remote attackers might obtain sensitive information by accessing a technical-support data stream.

Recommendations For Red Hat sos versions 1.7 and earlier, review the archive generated by sosreport for cleartext passwords in the fstab file and remove or secure any sensitive information before sharing the archive. Consider adding a warning to review the archive for included passwords to prevent unintended disclosure of sensitive information.

Correção

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

CVE-2014-3925

USN-2845-1

Produtos afetados

Red Hat Sos

Ubuntu

Referências · 13

• https://nvd.nist.gov/vuln/detail/CVE-2014-3925 · Nota de Segurança
• http://openwall.com/lists/oss-security/2014/05/29/6 · Nota
• https://ubuntu.com/security/CVE-2015-7529 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7529 · Nota de Segurança
• https://osv.dev/vulnerability/UBUNTU-CVE-2014-3925 · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2014/05/30/3 · Nota
• https://cve.org/CVERecord?id=CVE-2014-3925 · Nota de Segurança
• https://bugzilla.redhat.com/show_bug.cgi?id=1102633 · Aviso do Fabricante
• https://ubuntu.com/security/notices/USN-2845-1 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2014-3925 · Aviso do Fabricante
• http://ubuntu.com/usn/USN-2845-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/USN-2845-1 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3925 · Nota de Segurança