- Home
- CVEs with nessus.description==Sos is a set of tools that gather information about system hardware and configuration.
The sosreport utility incorrectly included Certificate-based private entitlement keys for upstream updates in the resulting archive of debugging information. An attacker able to access the archive could use the keys to access content available to the host. Scientific Linux systems cannot use this upstream service and are unaffected.
(CVE-2011-4083)
This updated sos package also includes numerous bug fixes and enhancements.
All sos users are advised to upgrade to this updated package, which resolves these issues and adds these enhancements.
Max CVSS | 0 |
Min CVSS | 0 |
Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published |
Back to Top
Mark selected
Back to Top