PT-2011-1448 · Suse · Suse Linux Enterprise

Published 2011-01-12 · Updated 2017-08-17 · CVE-2010-3912

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions SUSE Linux Enterprise versions 10 SP3 and 11 SP1

Description The supportconfig script in supportutils does not properly disguise passwords in configuration files. The impact and attack vectors of this issue are not specified.

Recommendations For SUSE Linux Enterprise version 10 SP3, update the supportutils package to a version that properly disguises passwords in configuration files. For SUSE Linux Enterprise version 11 SP1, update the supportutils package to a version that properly disguises passwords in configuration files. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-255

Related Identifiers

CVE-2010-3912

Affected Products

Suse Linux Enterprise

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2010-3912 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00003.html · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/64690 · Note
• http://vupen.com/english/advisories/2011/0076 · Note
• http://secunia.com/advisories/42877 · Note
• http://osvdb.org/70405 · Note