CVE-2014-4040

Name of the Vulnerable Software and Affected Versions powerpc-utils version 1.2.20

Description The issue allows remote attackers to obtain sensitive information by leveraging access to a technical-support data stream, as the snap function in powerpc-utils produces an archive with fstab and yaboot.conf files that might contain cleartext passwords. It lacks a warning about reviewing this archive to detect included passwords.

Recommendations For powerpc-utils version 1.2.20, consider reviewing the archive produced by the snap function to detect any included passwords in the fstab and yaboot.conf files, and take necessary actions to secure sensitive information. As a temporary workaround, restrict access to the technical-support data stream to minimize the risk of exploitation.