{"id":"CVE-2014-3925","aliases":["EUVD-2014-3862","GHSA-37q9-ff6c-vjm6","RHBA-2014:1200","UBUNTU-CVE-2014-3925","USN-2845-1"],"status":"published","title":"sosreport in Red Hat sos 1.7 and earlier on Red Hat Enterprise Linux (RHEL) 5 produces an archive...","description":"sosreport in Red Hat sos 1.7 and earlier on Red Hat Enterprise Linux (RHEL) 5 produces an archive with an fstab file potentially containing cleartext passwords, and lacks a warning about reviewing this archive to detect included passwords, which might allow remote attackers to obtain sensitive information by leveraging access to a technical-support data stream.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02152,"percentile":0.82267,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-255"],"published":"2014-06-01T00:00:00Z","modified":"2026-06-17T00:09:08Z","fixes":[{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"sos","fixed_in":["0:1.7-9.73.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"sos","fixed_in":["0:1.7-9.73.el5"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"sosreport","fixed_in":["3.1-1ubuntu2.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"sos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7-9.73.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"sos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7-9.73.el5"}]}]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"sosreport","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1-1ubuntu2.2"}]}],"versions":["3.0-1","3.1-1","3.1-1ubuntu1","3.1-1ubuntu2","3.1-1ubuntu2.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"sosreport","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1-1ubuntu2.2"}]}],"versions":["3.0-1","3.1-1","3.1-1ubuntu1","3.1-1ubuntu2","3.1-1ubuntu2.1"],"bundled":2}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"redhat","product":"sos"}],"references":[{"url":"http://openwall.com/lists/oss-security/2014/05/29/6","tags":["mailing-list","x_refsource_MLIST","x_transferred","report"]},{"url":"http://www.ubuntu.com/usn/USN-2845-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1102633","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://openwall.com/lists/oss-security/2014/05/30/3","tags":["mailing-list","x_refsource_MLIST","x_transferred","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-3925","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-37q9-ff6c-vjm6"},{"url":"https://access.redhat.com/errata/RHBA-2014:1200","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=773350","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=782588","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=783423","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=833406","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=916937","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1099151","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1099520","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1107751","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhba-2014_1200.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-3925","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1103324","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-3925","tags":["advisory","report"]},{"url":"https://ubuntu.com/security/CVE-2014-3925","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-2845-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2015-7529","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2014-3925","description":"sosreport in Red Hat sos 1.7 and earlier on Red Hat Enterprise Linux (RHEL) 5 produces an archive with an fstab file potentially containing cleartext passwords, and lacks a warning about reviewing this archive to detect included passwords, which might allow remote attackers to obtain sensitive information by leveraging access to a technical-support data stream.","status":"published","published":"2014-06-01T01:00:00Z","modified":"2024-08-06T10:57:18.124Z","updated_at":"2026-11-02T14:33:44.569327Z"}],"euvd":[{"id":"EUVD-2014-3862","description":"sosreport in Red Hat sos 1.7 and earlier on Red Hat Enterprise Linux (RHEL) 5 produces an archive with an fstab file potentially containing cleartext passwords, and lacks a warning about reviewing this archive to detect included passwords, which might allow remote attackers to obtain sensitive information by leveraging access to a technical-support data stream.","status":"published","published":"2014-06-01T01:00:00Z","modified":"2024-08-06T10:57:18Z","updated_at":"2026-11-03T01:57:08.947358Z"}],"ghsa":[{"id":"GHSA-37q9-ff6c-vjm6","title":"sosreport in Red Hat sos 1.7 and earlier on Red Hat Enterprise Linux (RHEL) 5 produces an archive...","description":"sosreport in Red Hat sos 1.7 and earlier on Red Hat Enterprise Linux (RHEL) 5 produces an archive with an fstab file potentially containing cleartext passwords, and lacks a warning about reviewing this archive to detect included passwords, which might allow remote attackers to obtain sensitive information by leveraging access to a technical-support data stream.","status":"published","published":"2022-05-17T03:57:26Z","modified":"2023-01-28T05:00:48Z","updated_at":"2026-11-02T14:43:24.927661Z"}],"nvd":[{"id":"CVE-2014-3925","description":"sosreport in Red Hat sos 1.7 and earlier on Red Hat Enterprise Linux (RHEL) 5 produces an archive with an fstab file potentially containing cleartext passwords, and lacks a warning about reviewing this archive to detect included passwords, which might allow remote attackers to obtain sensitive information by leveraging access to a technical-support data stream.","status":"published","published":"2014-06-01T04:29:34.923Z","modified":"2026-06-17T00:09:08.783Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-255"],"updated_at":"2026-11-02T14:02:54.464139Z"}],"osv":[{"id":"RHBA-2014:1200","title":"Red Hat Bug Fix Advisory: sos bug fix update","status":"published","published":"2024-09-15T21:25:51Z","modified":"2025-11-22T10:48:21Z","updated_at":"2026-11-02T15:52:58.117212Z"},{"id":"UBUNTU-CVE-2014-3925","description":"sosreport in Red Hat sos 1.7 and earlier on Red Hat Enterprise Linux (RHEL) 5 produces an archive with an fstab file potentially containing cleartext passwords, and lacks a warning about reviewing this archive to detect included passwords, which might allow remote attackers to obtain sensitive information by leveraging access to a technical-support data stream.","status":"published","published":"2014-06-01T00:00:00Z","modified":"2026-02-04T04:28:39.267201Z","updated_at":"2026-11-02T15:54:09.010095Z"},{"id":"USN-2845-1","title":"sosreport vulnerabilities","description":"Dolev Farhi discovered an information disclosure issue in SoS. If the\n/etc/fstab file contained passwords, the passwords were included in the\nSoS report. This issue only affected Ubuntu 14.04 LTS. (CVE-2014-3925)\n\nMateusz Guzik discovered that SoS incorrectly handled temporary files. A\nlocal attacker could possibly use this issue to overwrite arbitrary files\nor gain access to temporary file contents containing sensitive system\ninformation. (CVE-2015-7529)\n","status":"published","published":"2015-12-18T03:39:01Z","modified":"2026-02-10T04:40:56Z","updated_at":"2026-11-02T16:58:10.303275Z"}]}}