medium4.3
CVE-2014-0246
SOSreport stores the md5 hash of the GRUB bootloader password in an archive, which allows local users to obtain sensitive information by reading the archive.
Impact
SOSreport stores the md5 hash of the GRUB bootloader password in an archive, which allows local users to obtain sensitive information by reading the archive.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sosreport Project | Sosreport | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.openwall.com/lists/oss-security/2014/05/27/1
- http://www.securityfocus.com/bid/67634
- https://bugzilla.redhat.com/show_bug.cgi?id=1101393
- http://www.openwall.com/lists/oss-security/2014/05/27/1
- http://www.securityfocus.com/bid/67634
- https://bugzilla.redhat.com/show_bug.cgi?id=1101393