Every CVE Search/ Get API key

CVE-2014-4040

snap in powerpc-utils 1.2.20 produces an archive with fstab and yaboot.conf files potentially...

5.0 MediumFix available

snap in powerpc-utils 1.2.20 produces an archive with fstab and yaboot.conf files potentially containing cleartext passwords, and lacks a warning about reviewing this archive to detect included passwords, which might allow remote attackers to obtain sensitive information by leveraging access to a technical-support data stream.

Exploit likelihood

1.83%Up 0.8 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.0

snap in powerpc-utils 1.2.20 produces an archive with fstab and yaboot.conf files potentially containing cleartext passwords, and lacks a warning about reviewing this archive to detect included passwords, which might allow remote attackers to obtain sensitive information by leveraging access to a technical-support data stream.

Record
CVE-2014-4040
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:P/I:N/A:N
Weakness
CWE-310
Updated
2026-11-02
CVE List No score

snap in powerpc-utils 1.2.20 produces an archive with fstab and yaboot.conf files potentially containing cleartext passwords, and lacks a warning about reviewing this archive to detect included passwords, which might allow remote attackers to obtain sensitive information by leveraging access to a technical-support data stream.

Record
CVE-2014-4040
Updated
2026-11-02
EUVDEUVD-2014-3971 No score

snap in powerpc-utils 1.2.20 produces an archive with fstab and yaboot.conf files potentially containing cleartext passwords, and lacks a warning about reviewing this archive to detect included passwords, which might allow remote attackers to obtain sensitive information by leveraging access to a technical-support data stream.

Record
EUVD-2014-3971
Updated
2026-11-03
GitHub AdvisoriesGHSA-c7rv-hg7f-px75 No score

snap in powerpc-utils 1.2.20 produces an archive with fstab and yaboot.conf files potentially...

snap in powerpc-utils 1.2.20 produces an archive with fstab and yaboot.conf files potentially containing cleartext passwords, and lacks a warning about reviewing this archive to detect included passwords, which might allow remote attackers to obtain sensitive information by leveraging access to a technical-support data stream.

Record
GHSA-c7rv-hg7f-px75
Updated
2026-11-02
OSV No score

snap in powerpc-utils 1.2.20 produces an archive with fstab and yaboot.conf files potentially containing cleartext passwords, and lacks a warning about reviewing this archive to detect included passwords, which might allow remote attackers to obtain sensitive information by leveraging access to a technical-support data stream.

Record
CVE-2014-4040
Updated
2026-11-02
OSVDEBIAN-CVE-2014-4040 No score

snap in powerpc-utils 1.2.20 produces an archive with fstab and yaboot.conf files potentially containing cleartext passwords, and lacks a warning about reviewing this archive to detect included passwords, which might allow remote attackers to obtain sensitive information by leveraging access to a technical-support data stream.

Record
DEBIAN-CVE-2014-4040
Updated
2026-11-02
Show 4 moreShow less
OSVSUSE-RU-2015:0574-1 No score

Security update for powerpc-utils

The 'snap' system information collection tool of the PowerPC Utils package collected fstab and yaboot.conf files which might contain passwords. (CVE-2014-4040)

As these files are of interest, we now print a warning that the user of the 'snap' tool should check if private passwords are in those files.

Security Issues:

* CVE-2014-4040
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4040>
Record
SUSE-RU-2015:0574-1
Updated
2026-11-02
OSVSUSE-SU-2015:0232-1 No score

Security update for powerpc-utils

powerpc-utils was updated to fix one security issue.

This security issue was fixed:

  • May expose passwords from fstab or yaboot.con (CVE-2014-4040).

This additional fix was included:

  • LPAR crashes when drmgr attempts to offline last remaining cpu core (bnc#901216)
Record
SUSE-SU-2015:0232-1
Updated
2026-11-02
OSVSUSE-SU-2025:21067-1 No score

Security update for powerpc-utils

This update for powerpc-utils fixes the following issues:

  • Start SMT service after networking (bsc#1249152 ltc#214730)
  • Fix inconsistent Core Online/Offline States Observed in lscpu and ppc64_cpu --info Command Outputs During DLPAR Operation (bsc#1246126 ltc#214064)
  • Fix HNV installation network conflicts across all distributions (jsc#PED-3946)
  • Fix negative values of idle PURR (bsc#1238322 ltc#210808)
Record
SUSE-SU-2025:21067-1
Updated
2026-11-02
OSVUBUNTU-CVE-2014-4040 No score

snap in powerpc-utils 1.2.20 produces an archive with fstab and yaboot.conf files potentially containing cleartext passwords, and lacks a warning about reviewing this archive to detect included passwords, which might allow remote attackers to obtain sensitive information by leveraging access to a technical-support data stream.

Record
UBUNTU-CVE-2014-4040
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
powerpc-utils
Debian:12
 before 1.3.1-2
1.3.1-2
powerpc-utils
Debian:13
 before 1.3.1-2
1.3.1-2
powerpc-utils
Debian:14
 before 1.3.1-2
1.3.1-2
powerpc-utils
Red Hat:enterprise_linux:7::server
 before 0:1.2.24-7.el7
0:1.2.24-7.el7
powerpc-utils-debuginfo
Red Hat:enterprise_linux:7::server
 before 0:1.2.24-7.el7
0:1.2.24-7.el7
powerpc-utils
SUSE:Linux Enterprise Server 12
 before 1.2.22-7.1
1.2.22-7.1
powerpc-utils
SUSE:Linux Enterprise Server for SAP Applications 12
 before 1.2.22-7.1
1.2.22-7.1
powerpc-utils
SUSE:Linux Micro 6.1
 before 1.3.12-slfo.1.1_5.1
1.3.12-slfo.1.1_5.1

History

History
RecordedChangedSources
affected
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2014-4040 is a medium vulnerability (CVSS 5.0) in Powerpc-utils Project Powerpc-utils, published June 17, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.83%, the 78th percentile. Fixed in powerpc-utils 1.3.1-2.

References

Show 24 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open