CVE-2014-3925 Information disclosure in n/a
Attackers can obtain cleartext passwords from sosreport archives if they access technical support data streams, exposing sensitive system credentials.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2014-3925?
CVE-2014-3925 is a medium-severity vulnerability in Canonical Ubuntu Linux, published on 1 Jun 2014. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
sosreport in Red Hat sos 1.7 and earlier on Red Hat Enterprise Linux (RHEL) 5 produces an archive with an fstab file potentially containing cleartext passwords, and lacks a warning about reviewing this archive to detect included passwords, which might allow remote attackers to obtain sensitive information by leveraging access to a technical-support data stream.
Weakness: CWE-255
Which versions are affected by CVE-2014-3925?
It affects 2 products.
Linux distribution packages (2)
sos Red Hat:enterprise_linux:5::client | All versions | 0:1.7-9.73.el5 |
sos Red Hat:enterprise_linux:5::server | All versions | 0:1.7-9.73.el5 |
Products include Canonical Ubuntu Linux, Redhat Sos.
How do I fix CVE-2014-3925?
Apply the vendor's patch.
Is CVE-2014-3925 being exploited?
There is no known exploitation of CVE-2014-3925 in the wild and no public exploit code.
Other vulnerabilities in Canonical Ubuntu Linux
Sources
Also known as GHSA-37q9-ff6c-vjm6, RHBA-2014:1200, UBUNTU-CVE-2014-3925.