CVE-2010-3912: Critical severity suse linux vulnerability
Published Jan 12, 2011
·Updated
The supportconfig script in supportutils in SUSE Linux Enterprise 11 SP1 and 10 SP3 does not "disguise passwords" in configuration files, which has unknown impact and attack vectors.
Affected Software
2 affected components
Novell SUSE Linux=11-sp1
Novell SUSE Linux=10-sp3
Event History
Jan 12, 2011
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2010-3912?
CVE-2010-3912 has an unknown severity level due to the lack of detailed information regarding its impact.
2
How do I fix CVE-2010-3912?
To mitigate CVE-2010-3912, ensure that the supportconfig script does not store plain text passwords in configuration files.
3
What systems are affected by CVE-2010-3912?
CVE-2010-3912 affects SUSE Linux Enterprise 11 SP1 and SUSE Linux Enterprise 10 SP3.
4
What are the risks associated with CVE-2010-3912?
The risks associated with CVE-2010-3912 include the potential exposure of sensitive passwords in configuration files.
5
Is there a workaround for CVE-2010-3912?
A recommended workaround for CVE-2010-3912 is to manually review and secure any configuration files that may contain plaintext passwords.