The sosreport utility in the Red Hat sos package before 1.7-9 and 2.x before 2.2-17 includes (1) Certificate-based Red Hat Network private entitlement keys and the (2) private key for the entitlement in an archive of debugging information, which might allow remote attackers to obtain sensitive information by reading the archive.

The remote Oracle Linux 6 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2011-1536 advisory.

  - The sosreport utility in the Red Hat sos package before 1.7-9 and 2.x before 2.2-17 includes (1)     Certificate-based Red Hat Network private entitlement keys and the (2) private key for the entitlement in     an archive of debugging information, which might allow remote attackers to obtain sensitive information by     reading the archive. (CVE-2011-4083)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

From Red Hat Security Advisory 2012:0153 :

An updated sos package that fixes one security issue, several bugs, and adds various enhancements is now available for Red Hat Enterprise Linux 5.

The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.

Sos is a set of tools that gather information about system hardware and configuration.

The sosreport utility incorrectly included Certificate-based Red Hat Network private entitlement keys in the resulting archive of debugging information. An attacker able to access the archive could use the keys to access Red Hat Network content available to the host. This issue did not affect users of Red Hat Network Classic. (CVE-2011-4083)

This updated sos package also includes numerous bug fixes and enhancements. Space precludes documenting all of these changes in this advisory. Users are directed to the Red Hat Enterprise Linux 5.8 Technical Notes, linked to in the References, for information on the most significant of these changes.

All sos users are advised to upgrade to this updated package, which resolves these issues and adds these enhancements.

An updated sos package that fixes one security issue, several bugs, and adds various enhancements is now available for Red Hat Enterprise Linux 5.

The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.

Sos is a set of tools that gather information about system hardware and configuration.

The sosreport utility incorrectly included Certificate-based Red Hat Network private entitlement keys in the resulting archive of debugging information. An attacker able to access the archive could use the keys to access Red Hat Network content available to the host. This issue did not affect users of Red Hat Network Classic. (CVE-2011-4083)

This updated sos package also includes numerous bug fixes and enhancements. Space precludes documenting all of these changes in this advisory. Users are directed to the Red Hat Enterprise Linux 5.8 Technical Notes, linked to in the References, for information on the most significant of these changes.

All sos users are advised to upgrade to this updated package, which resolves these issues and adds these enhancements.

Sos is a set of tools that gather information about system hardware and configuration.

The sosreport utility incorrectly included Certificate-based private entitlement keys for upstream updates in the resulting archive of debugging information. An attacker able to access the archive could use the keys to access content available to the host. Scientific Linux systems cannot use this upstream service and are unaffected.
(CVE-2011-4083)

This updated sos package also includes numerous bug fixes and enhancements.

All sos users are advised to upgrade to this updated package, which resolves these issues and adds these enhancements.

Sos is a set of tools that gather information about system hardware and configuration.

The sosreport utility incorrectly included aspects of TUV's Certificate-based private entitlement keys in the resulting archive of debugging information. An attacker able to access the archive could use the keys to access that content available to the host. This issue did not affect users of the 'Classic' access method. (CVE-2011-4083)

This updated sos package also includes numerous bug fixes and enhancements.

All users of sos are advised to upgrade to this updated package, which contains backported patches to correct these issues and add these enhancements.

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2011:1536 advisory.

  - sos: sosreport is gathering certificate-based RHN entitlement private keys (CVE-2011-4083)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
181091	Oracle Linux 6 : sos (ELSA-2011-1536)	Nessus	Oracle Linux Local Security Checks	high
68471	Oracle Linux 5 : sos (ELSA-2012-0153)	Nessus	Oracle Linux Local Security Checks	medium
63564	CentOS 5 : sos (CESA-2012:0153)	Nessus	CentOS Local Security Checks	medium
61270	Scientific Linux Security Update : sos on SL5.x (20120221)	Nessus	Scientific Linux Local Security Checks	medium
61198	Scientific Linux Security Update : sos on SL6.x	Nessus	Scientific Linux Local Security Checks	medium
58054	RHEL 5 : sos (RHSA-2012:0153)	Nessus	Red Hat Local Security Checks	medium
57016	RHEL 6 : sos (RHSA-2011:1536)	Nessus	Red Hat Local Security Checks	high

Detections

Analytics

CVE-2011-4083

high

Tenable Plugins

high

medium

medium

medium

medium

medium

high