CVE-2011-3588

CVE-2011-3588 describes a vulnerability in the SSH configuration of the Red Hat mkdumprd script for kexec-tools, affecting versions before 1.102pre-154 and 2.0.0-209 in Red Hat Enterprise Linux. The vulnerability stems from the disabled StrictHostKeyChecking option, allowing man-in-the-middle attackers to spoof kdump servers. This could lead to the unauthorized acquisition of sensitive core information. The CVSS score of 5.7 indicates a medium severity, with an adjacent network attack vector and medium attack complexity, resulting in a complete confidentiality impact. There is currently no evidence of active exploitation, no known public exploit code (Metasploit, Nuclei, ExploitDB), and minimal community discussion or media coverage.