The kdump implementation is missing the host key verification in the kdump and mkdumprd OpenSSH integration of kdump prior to version 2012-01-20. This is similar to CVE-2011-3588, but different in that the kdump implementation is specific to SUSE. A remote malicious kdump server could use this flaw to impersonate the correct kdump server to obtain security sensitive information (kdump core files).
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: microfocus
Published: 2018-06-08T17:00:00Z
Updated: 2024-09-17T00:26:16.217Z
Reserved: 2011-10-25T00:00:00
Link: CVE-2011-4190
Vulnrichment
No data.
NVD
Status : Modified
Published: 2018-06-08T17:29:00.223
Modified: 2024-11-21T01:31:59.927
Link: CVE-2011-4190
Redhat
No data.