The supportconfig script in supportutils in SUSE Linux Enterprise 11 SP1 and 10 SP3 does not disguise passwords in configuration files, which has unknown impact and attack vectors.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Suse_linux | Novell | 10-sp3 (including) | 10-sp3 (including) |
| Suse_linux | Novell | 11-sp1 (including) | 11-sp1 (including) |
References
- http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00003.html
- http://osvdb.org/70405
- http://secunia.com/advisories/42877
- http://www.vupen.com/english/advisories/2011/0076
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64690
- http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00003.html
- http://osvdb.org/70405
- http://secunia.com/advisories/42877
- http://www.vupen.com/english/advisories/2011/0076
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64690