CVE-2010-3912

Published: Jan 13, 2011Modified: Apr 29, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

The supportconfig script in supportutils in SUSE Linux Enterprise 11 SP1 and 10 SP3 does not "disguise passwords" in configuration files, which has unknown impact and attack vectors.

Affected (2)

Products: Novell: Suse Linux

Novell

1 product

Suse Linux

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Novell Suse Linux	Version 10 sp3
Novell Suse Linux	Version 11 sp1

Related CWEs

CWE-255

References (10)

http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00003.html

Source: cve@mitre.org

http://osvdb.org/70405

Source: cve@mitre.org

http://secunia.com/advisories/42877

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2011/0076

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/64690

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00003.html