CVE-2014-3925: Medium severity Canonical Ubuntu Linux vulnerability
sosreport in Red Hat sos 1.7 and earlier on Red Hat Enterprise Linux (RHEL) 5 produces an archive with an fstab file potentially containing cleartext passwords, and lacks a warning about reviewing this archive to detect included passwords, which might allow remote attackers to obtain sensitive information by leveraging access to a technical-support data stream.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-3925?
CVE-2014-3925 has a medium severity rating due to the potential exposure of cleartext passwords in produced archives.
How do I fix CVE-2014-3925?
To fix CVE-2014-3925, update to a newer version of Red Hat sos that is later than 1.7, or ensure sensitive information is not included in the fstab file before generating the archive.
Who is affected by CVE-2014-3925?
CVE-2014-3925 affects users of Red Hat sos 1.7 and earlier on Red Hat Enterprise Linux 5 and certain versions of Ubuntu Linux.
What vulnerability does CVE-2014-3925 exploit?
CVE-2014-3925 exploits the lack of warning regarding cleartext passwords in the fstab file within sosreport archives.
Is CVE-2014-3925 a critical vulnerability?
CVE-2014-3925 is not classified as critical, but users should take precautions to protect sensitive information due to possible exposure.