Published: 15/02/2014 Updated: 06/03/2014

CVSS v2 Base Score: 5.7 | Impact Score: 6.9 | Exploitability Score: 5.5

VMScore: 507

Vector: AV:A/AC:M/Au:N/C:C/I:N/A:N

The SSH configuration in the Red Hat mkdumprd script for kexec-tools, as distributed in the kexec-tools 1.x prior to 1.102pre-154 and 2.x prior to 2.0.0-209 packages in Red Hat Enterprise Linux, disables the StrictHostKeyChecking option, which allows man-in-the-middle malicious users to spoof kdump servers, and obtain sensitive core information, by using an arbitrary SSH key.

Vulnerable Product	Search on Vulmon	Subscribe to Product
redhat kexec-tools

Synopsis Moderate: kexec-tools security, bug fix, and enhancement update Type/Severity Security Advisory: Moderate Topic An updated kexec-tools package that resolves three security issues, fixes several bugs and adds various enhancements is now available for Red Hat Enterprise Linux 5The Red Hat Security R ...

Synopsis Moderate: kexec-tools security, bug fix, and enhancement update Type/Severity Security Advisory: Moderate Topic An updated kexec-tools package that fixes three security issues, variousbugs, and adds enhancements is now available for Red HatEnterprise Linux 6The Red Hat Security Response Team has r ...

CWE-310 https://bugzilla.redhat.com/show_bug.cgi?id=716439 http://rhn.redhat.com/errata/RHSA-2011-1532.html http://rhn.redhat.com/errata/RHSA-2012-0152.html https://access.redhat.com/errata/RHSA-2012:0152 https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2011-3588

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect