EUVD-2011-3144

Malware in sbrugna...

YaST2 network file read vulnerability

Novell YaST Yet another Setup Tool is a set of RPM-based installation and configuration tools for the openSUSE and SUSE Linux Enterprise operating systems from the U.S. company Novell. The tool can configure the system hardware, network, services, etc. YaST2 network is one of the packages to mana...

CVE-2012-0425

LanItems.ycp in savey2logs in yast2-network before 2.24.4 in SUSE YaST writes cleartext Wi-Fi credentials to the y2log log file, which allows context-dependent attackers to obtain sensitive information by reading the 1 WIRELESSWPAPASSWORD or 2 WIRELESSCLIENTKEYPASSWORD field...

CVE-2012-0425

CVE-2012-0425 affects SUSE YaST, specifically LanItems.ycp in save_y2logs of yast2-network, where before version 2.24.4 the log file y2log can contain cleartext Wi‑Fi credentials. The fields (1) WIRELESS_WPA_PASSWORD and (2) WIRELESS_CLIENT_KEY_PASSWORD may be read by context-dependent attackers,...