CVE-2014-3925
published 2014-06-01CVE-2014-3925: sosreport in Red Hat sos 1.7 and earlier on Red Hat Enterprise Linux (RHEL) 5 produces an archive with an fstab file potentially containing cleartext…
PriorityP424medium5CVSS 2.0
AVNACLAuNCPINAN
EPSS
2.15%
80.2th percentile
sosreport in Red Hat sos 1.7 and earlier on Red Hat Enterprise Linux (RHEL) 5 produces an archive with an fstab file potentially containing cleartext passwords, and lacks a warning about reviewing this archive to detect included passwords, which might allow remote attackers to obtain sensitive information by leveraging access to a technical-support data stream.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| debian | sosreport | — | — |
| redhat | sos | <= 1.7 | — |
CVSS provenance
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
osv5.0MEDIUM
vendor_debian5.0LOW
vendor_redhat5.0MEDIUM
vendor_ubuntu5.0MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-37q9-ff6c-vjm6: sosreport in Red Hat sos 1
ghsa_unreviewed·2022-05-17
CVE-2014-3925 [MEDIUM] GHSA-37q9-ff6c-vjm6: sosreport in Red Hat sos 1
sosreport in Red Hat sos 1.7 and earlier on Red Hat Enterprise Linux (RHEL) 5 produces an archive with an fstab file potentially containing cleartext passwords, and lacks a warning about reviewing this archive to detect included passwords, which might allow remote attackers to obtain sensitive information by leveraging access to a technical-support data stream.
OSV
sosreport vulnerabilities
osv·2015-12-18·CVSS 5.0
CVE-2014-3925 [MEDIUM] sosreport vulnerabilities
sosreport vulnerabilities
Dolev Farhi discovered an information disclosure issue in SoS. If the
/etc/fstab file contained passwords, the passwords were included in the
SoS report. This issue only affected Ubuntu 14.04 LTS. (CVE-2014-3925)
Mateusz Guzik discovered that SoS incorrectly handled temporary files. A
local attacker could possibly use this issue to overwrite arbitrary files
or gain access to temporary file contents containing sensitive system
information. (CVE-2015-7529)
OSV
CVE-2014-3925: sosreport in Red Hat sos 1
osv·2014-06-01·CVSS 5.0
CVE-2014-3925 [MEDIUM] CVE-2014-3925: sosreport in Red Hat sos 1
sosreport in Red Hat sos 1.7 and earlier on Red Hat Enterprise Linux (RHEL) 5 produces an archive with an fstab file potentially containing cleartext passwords, and lacks a warning about reviewing this archive to detect included passwords, which might allow remote attackers to obtain sensitive information by leveraging access to a technical-support data stream.
Ubuntu
SoS vulnerabilities
vendor_ubuntu·2015-12-18·CVSS 5.0
CVE-2014-3925 [MEDIUM] SoS vulnerabilities
Title: SoS vulnerabilities
Summary: sosreport could be made to expose sensitive information or overwrite files
as the administrator.
Dolev Farhi discovered an information disclosure issue in SoS. If the
/etc/fstab file contained passwords, the passwords were included in the
SoS report. This issue only affected Ubuntu 14.04 LTS. (CVE-2014-3925)
Mateusz Guzik discovered that SoS incorrectly handled temporary files. A
local attacker could possibly use this issue to overwrite arbitrary files
or gain access to temporary file contents containing sensitive system
information. (CVE-2015-7529)
Instructions: In general, a standard system update will make all the necessary changes.
Red Hat
sos: does not indicate data sent is potentially sensitive on Red Hat Enterprise Linux 5
vendor_redhat·2014-05-29·CVSS 5.0
CVE-2014-3925 [MEDIUM] sos: does not indicate data sent is potentially sensitive on Red Hat Enterprise Linux 5
sos: does not indicate data sent is potentially sensitive on Red Hat Enterprise Linux 5
sosreport in Red Hat sos 1.7 and earlier on Red Hat Enterprise Linux (RHEL) 5 produces an archive with an fstab file potentially containing cleartext passwords, and lacks a warning about reviewing this archive to detect included passwords, which might allow remote attackers to obtain sensitive information by leveraging access to a technical-support data stream.
Statement: This issue did not affect the versions of sosreport as shipped with Red Hat Enterprise Linux 6.
Package: sos (Red Hat Enterprise Linux 6) - Not affected
Debian
CVE-2014-3925: sosreport - sosreport in Red Hat sos 1.7 and earlier on Red Hat Enterprise Linux (RHEL) 5 pr...
vendor_debian·2014·CVSS 5.0
CVE-2014-3925 [MEDIUM] CVE-2014-3925: sosreport - sosreport in Red Hat sos 1.7 and earlier on Red Hat Enterprise Linux (RHEL) 5 pr...
sosreport in Red Hat sos 1.7 and earlier on Red Hat Enterprise Linux (RHEL) 5 produces an archive with an fstab file potentially containing cleartext passwords, and lacks a warning about reviewing this archive to detect included passwords, which might allow remote attackers to obtain sensitive information by leveraging access to a technical-support data stream.
Scope: local
bookworm: resolved
bullseye: resolved
No detection rules found.
No public exploits indexed.
http://openwall.com/lists/oss-security/2014/05/29/6http://openwall.com/lists/oss-security/2014/05/30/3http://www.ubuntu.com/usn/USN-2845-1https://bugzilla.redhat.com/show_bug.cgi?id=1102633http://openwall.com/lists/oss-security/2014/05/29/6http://openwall.com/lists/oss-security/2014/05/30/3http://www.ubuntu.com/usn/USN-2845-1https://bugzilla.redhat.com/show_bug.cgi?id=1102633
2014-06-01
Published