{"id":"CVE-2012-2664","aliases":["EUVD-2012-2647","GHSA-3979-2hvm-67c3","RHSA-2012:0958","RHSA-2013:1121"],"status":"published","title":"The sosreport utility in the Red Hat sos package before 2.2-29 does not remove the root user...","description":"The sosreport utility in the Red Hat sos package before 2.2-29 does not remove the root user password information from the Kickstart configuration file (/root/anaconda-ks.cfg) when creating an archive of debugging information, which might allow attackers to obtain passwords or password hashes.","severity":{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01413,"percentile":0.72882,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-255"],"published":"2012-06-29T19:00:00Z","modified":"2026-06-16T23:41:50Z","fixes":[{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"sos","fixed_in":["0:2.2-29.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"sos","fixed_in":["0:2.2-29.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"sos","fixed_in":["0:2.2-29.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"sos","fixed_in":["0:2.2-29.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"sos","fixed_in":["0:1.7-9.62.el5_9.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"sos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2-29.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"sos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2-29.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"sos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2-29.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"sos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2-29.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"sos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7-9.62.el5_9.1"}]}]}],"products":[{"vendor":"redhat","product":"sos"}],"references":[{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0958.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-1121.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/76468","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www.securityfocus.com/bid/54116","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-2664","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-3979-2hvm-67c3"},{"url":"https://access.redhat.com/errata/RHSA-2012:0958","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#low","tags":["article"]},{"url":"https://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/6.3_Technical_Notes/sos.html#RHSA-2012-0958","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=730641","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=749262","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=749279","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=749919","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=771393","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=771501","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=782589","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=784862","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=784874","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=790402","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=826884","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0958.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-2664","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-2664","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2013:1121","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=965807","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1121.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2012-2664","description":"The sosreport utility in the Red Hat sos package before 2.2-29 does not remove the root user password information from the Kickstart configuration file (/root/anaconda-ks.cfg) when creating an archive of debugging information, which might allow attackers to obtain passwords or password hashes.","status":"published","published":"2012-06-29T19:00:00Z","modified":"2024-08-06T19:42:32.152Z","updated_at":"2026-11-02T14:34:49.937255Z"}],"euvd":[{"id":"EUVD-2012-2647","description":"The sosreport utility in the Red Hat sos package before 2.2-29 does not remove the root user password information from the Kickstart configuration file (/root/anaconda-ks.cfg) when creating an archive of debugging information, which might allow attackers to obtain passwords or password hashes.","status":"published","published":"2012-06-29T19:00:00Z","modified":"2024-08-06T19:42:32Z","updated_at":"2026-11-03T01:56:13.895728Z"}],"ghsa":[{"id":"GHSA-3979-2hvm-67c3","title":"The sosreport utility in the Red Hat sos package before 2.2-29 does not remove the root user...","description":"The sosreport utility in the Red Hat sos package before 2.2-29 does not remove the root user password information from the Kickstart configuration file (/root/anaconda-ks.cfg) when creating an archive of debugging information, which might allow attackers to obtain passwords or password hashes.","status":"published","published":"2022-05-17T01:45:43Z","modified":"2023-02-03T05:05:18Z","updated_at":"2026-11-02T14:53:43.432623Z"}],"nvd":[{"id":"CVE-2012-2664","description":"The sosreport utility in the Red Hat sos package before 2.2-29 does not remove the root user password information from the Kickstart configuration file (/root/anaconda-ks.cfg) when creating an archive of debugging information, which might allow attackers to obtain passwords or password hashes.","status":"published","published":"2012-06-29T19:55:03.797Z","modified":"2026-06-16T23:41:50.123Z","cvss":[{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-255"],"updated_at":"2026-11-02T14:02:14.774945Z"}],"osv":[{"id":"RHSA-2012:0958","title":"Red Hat Security Advisory: sos security, bug fix, and enhancement update","status":"published","published":"2024-09-15T19:47:32Z","modified":"2025-11-22T10:37:50Z","updated_at":"2026-11-02T15:53:01.495018Z"},{"id":"RHSA-2013:1121","title":"Red Hat Security Advisory: sos security update","status":"published","published":"2024-09-15T19:47:36Z","modified":"2025-11-22T10:45:33Z","updated_at":"2026-11-02T15:53:01.993625Z"}]}}