CVE-2014-3925
The MITRE CVE dictionary describes this issue as:
sosreport in Red Hat sos 1.7 and earlier on Red Hat Enterprise Linux (RHEL) 5 produces an archive with an fstab file potentially containing cleartext passwords, and lacks a warning about reviewing this archive to detect included passwords, which might allow remote attackers to obtain sensitive information by leveraging access to a technical-support data stream.
Find out more about CVE-2014-3925 from the MITRE CVE dictionary dictionary and NIST NVD.
Statement
This issue did not affect the versions of sosreport as shipped with Red Hat Enterprise Linux 6.
CVSS v2 metrics
| Base Score | 1.9 |
|---|---|
| Base Metrics | AV:L/AC:M/Au:N/C:P/I:N/A:N |
| Access Vector | Local |
| Access Complexity | Medium |
| Authentication | None |
| Confidentiality Impact | Partial |
| Integrity Impact | None |
| Availability Impact | None |
Find out more about Red Hat support for the Common Vulnerability Scoring System (CVSS).
Red Hat Security Errata
| Platform | Errata | Release Date |
|---|---|---|
| Red Hat Enterprise Linux 5 (sos) | RHBA-2014:1200 | 2014-09-16 |
Affected Packages State
| Platform | Package | State |
|---|---|---|
| Red Hat Enterprise Linux 6 | sos | Not affected |
CVE description copyright © 2017, The MITRE Corporation