This script is Copyright (C) 2012-2014 Tenable Network Security, Inc.
The remote Scientific Linux host is missing a security update.
Sos is a set of tools that gather information about system hardware
The sosreport utility incorrectly included Certificate-based private
entitlement keys for upstream updates in the resulting archive of
debugging information. An attacker able to access the archive could
use the keys to access content available to the host. Scientific Linux
systems cannot use this upstream service and are unaffected.
This updated sos package also includes numerous bug fixes and
All sos users are advised to upgrade to this updated package, which
resolves these issues and adds these enhancements.
See also :
Update the affected sos package.
Risk factor :
Medium / CVSS Base Score : 4.3
Family: Scientific Linux Local Security Checks
Nessus Plugin ID: 61270 ()
CVE ID: CVE-2011-4083