CVE-2014-4040 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2014-4040 Interim 1 24 2025-11-05T05:05:48Z current 2021-05-30T13:21:44Z 2025-11-05T05:05:48Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2014-4040 snap in powerpc-utils 1.2.20 produces an archive with fstab and yaboot.conf files potentially containing cleartext passwords, and lacks a warning about reviewing this archive to detect included passwords, which might allow remote attackers to obtain sensitive information by leveraging access to a technical-support data stream. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2014-September/001013.html E-Mail link for SUSE-SU-2014:1211-1 https://lists.suse.com/pipermail/sle-security-updates/2015-February/001210.html E-Mail link for SUSE-SU-2015:0232-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Micro 5.0 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Micro 5.4 SUSE Linux Enterprise Micro 5.5 SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise Server for SAP Applications 11 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Micro 6.1 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 openSUSE Leap 15.2 openSUSE Leap 15.3 openSUSE Leap 15.4 powerpc-utils-1.2.16-0.13.1 powerpc-utils-1.2.22-2.1 powerpc-utils-1.2.22-7.1 powerpc-utils-1.2.26-6.1 powerpc-utils-1.3.10-150400.19.3.1 powerpc-utils-1.3.10-150400.19.9.1 powerpc-utils-1.3.11-150500.1.2 powerpc-utils-1.3.11-150500.3.6.1 powerpc-utils-1.3.12-150600.2.1 powerpc-utils-1.3.12-slfo.1.1_2.2 powerpc-utils-1.3.13-150700.4.2 powerpc-utils-1.3.13-160000.2.2 powerpc-utils-1.3.2-17.1 powerpc-utils-1.3.3-5.3 powerpc-utils-1.3.5-3.8 powerpc-utils-1.3.6-1.15 powerpc-utils-1.3.7-5.6.1 powerpc-utils-1.3.7.1-3.12.1 powerpc-utils-1.3.7.1-3.27.1 powerpc-utils-1.3.7.1-lp152.3.1 powerpc-utils-1.3.8-7.1 powerpc-utils-1.3.8-9.6.1 powerpc-utils-1.3.9-150300.9.17.1 powerpc-utils-1.3.9-150400.17.4 powerpc-utils-1.3.7.1-3.27.1 as a component of SUSE Linux Enterprise Micro 5.0 powerpc-utils-1.3.8-9.6.1 as a component of SUSE Linux Enterprise Micro 5.1 powerpc-utils-1.3.9-150300.9.17.1 as a component of SUSE Linux Enterprise Micro 5.2 powerpc-utils-1.3.10-150400.19.3.1 as a component of SUSE Linux Enterprise Micro 5.3 powerpc-utils-1.3.10-150400.19.9.1 as a component of SUSE Linux Enterprise Micro 5.4 powerpc-utils-1.3.11-150500.3.6.1 as a component of SUSE Linux Enterprise Micro 5.5 powerpc-utils-1.3.6-1.15 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 powerpc-utils-1.3.7.1-3.12.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 powerpc-utils-1.3.8-7.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 powerpc-utils-1.3.9-150400.17.4 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 powerpc-utils-1.3.11-150500.1.2 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 powerpc-utils-1.3.12-150600.2.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 powerpc-utils-1.3.13-150700.4.2 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 powerpc-utils-1.2.16-0.13.1 as a component of SUSE Linux Enterprise Server 11 SP3 powerpc-utils-1.2.22-2.1 as a component of SUSE Linux Enterprise Server 11 SP4 powerpc-utils-1.2.22-7.1 as a component of SUSE Linux Enterprise Server 12 powerpc-utils-1.2.26-6.1 as a component of SUSE Linux Enterprise Server 12 SP1 powerpc-utils-1.3.2-17.1 as a component of SUSE Linux Enterprise Server 12 SP2 powerpc-utils-1.3.3-5.3 as a component of SUSE Linux Enterprise Server 12 SP3 powerpc-utils-1.3.5-3.8 as a component of SUSE Linux Enterprise Server 12 SP4 powerpc-utils-1.3.7-5.6.1 as a component of SUSE Linux Enterprise Server 12 SP5 powerpc-utils-1.3.13-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 powerpc-utils-1.2.16-0.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 powerpc-utils-1.2.22-7.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 powerpc-utils-1.3.7-5.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 powerpc-utils-1.3.12-slfo.1.1_2.2 as a component of SUSE Linux Micro 6.1 powerpc-utils-1.3.7.1-lp152.3.1 as a component of openSUSE Leap 15.2 powerpc-utils-1.3.8-7.1 as a component of openSUSE Leap 15.3 powerpc-utils-1.3.9-150400.17.4 as a component of openSUSE Leap 15.4 snap in powerpc-utils 1.2.20 produces an archive with fstab and yaboot.conf files potentially containing cleartext passwords, and lacks a warning about reviewing this archive to detect included passwords, which might allow remote attackers to obtain sensitive information by leveraging access to a technical-support data stream. CVE-2014-4040 SUSE Linux Enterprise Micro 5.0:powerpc-utils-1.3.7.1-3.27.1 SUSE Linux Enterprise Micro 5.1:powerpc-utils-1.3.8-9.6.1 SUSE Linux Enterprise Micro 5.2:powerpc-utils-1.3.9-150300.9.17.1 SUSE Linux Enterprise Micro 5.3:powerpc-utils-1.3.10-150400.19.3.1 SUSE Linux Enterprise Micro 5.4:powerpc-utils-1.3.10-150400.19.9.1 SUSE Linux Enterprise Micro 5.5:powerpc-utils-1.3.11-150500.3.6.1 SUSE Linux Enterprise Module for Basesystem 15 SP1:powerpc-utils-1.3.6-1.15 SUSE Linux Enterprise Module for Basesystem 15 SP2:powerpc-utils-1.3.7.1-3.12.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:powerpc-utils-1.3.8-7.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:powerpc-utils-1.3.9-150400.17.4 SUSE Linux Enterprise Module for Basesystem 15 SP5:powerpc-utils-1.3.11-150500.1.2 SUSE Linux Enterprise Module for Basesystem 15 SP6:powerpc-utils-1.3.12-150600.2.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:powerpc-utils-1.3.13-150700.4.2 SUSE Linux Enterprise Server 11 SP3:powerpc-utils-1.2.16-0.13.1 SUSE Linux Enterprise Server 11 SP4:powerpc-utils-1.2.22-2.1 SUSE Linux Enterprise Server 12:powerpc-utils-1.2.22-7.1 SUSE Linux Enterprise Server 12 SP1:powerpc-utils-1.2.26-6.1 SUSE Linux Enterprise Server 12 SP2:powerpc-utils-1.3.2-17.1 SUSE Linux Enterprise Server 12 SP3:powerpc-utils-1.3.3-5.3 SUSE Linux Enterprise Server 12 SP4:powerpc-utils-1.3.5-3.8 SUSE Linux Enterprise Server 12 SP5:powerpc-utils-1.3.7-5.6.1 SUSE Linux Enterprise Server 16.0:powerpc-utils-1.3.13-160000.2.2 SUSE Linux Enterprise Server for SAP Applications 11 SP3:powerpc-utils-1.2.16-0.13.1 SUSE Linux Enterprise Server for SAP Applications 12:powerpc-utils-1.2.22-7.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:powerpc-utils-1.3.7-5.6.1 SUSE Linux Micro 6.1:powerpc-utils-1.3.12-slfo.1.1_2.2 openSUSE Leap 15.2:powerpc-utils-1.3.7.1-lp152.3.1 openSUSE Leap 15.3:powerpc-utils-1.3.8-7.1 openSUSE Leap 15.4:powerpc-utils-1.3.9-150400.17.4 moderate 5 AV:N/AC:L/Au:N/C:P/I:N/A:N