CVE-2014-3925

CVE-2014-3925 affects sosreport in Red Hat sos 1.7 and earlier on RHEL 5, where the generated archive may contain an fstab with cleartext passwords and lacks a warning to review for passwords, enabling potential sensitive-information disclosure if an attacker can access the technical-support data...

CVE-2012-2664

CVE-2012-2664 affects the sosreport utility in the Red Hat sos package prior to 2.2-29. The root user password information found in the Kickstart configuration file (/root/anaconda-ks.cfg) is not removed when creating an archive of debugging information, potentially allowing an attacker to obtain...

CVE-2011-4083

The CVE-2011-4083 issue affects the sosreport utility in Red Hat sos prior to 1.7-9 and 2.x prior to 2.2-17, where debugging archives can contain (1) certificate-based Red Hat Network private entitlement keys and (2) the entitlement private key. This information disclosure could allow remote atta...