View at Official ubuntu advisory, NVD, CVE.org · CVE detail
Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.
CVE-2014-4040 medium priority: Ubuntu including 2 source packages (powerpc-utils, ppc64-diag), 16 status rows across 9 suites (lucid, precise, saucy, trusty, upstream, utopic, vivid, wily, xenial): ignored 6, DNE 5, not-affected 3, needs-triage 1, released 1.
snap in powerpc-utils 1.2.20 produces an archive with fstab and yaboot.conf files potentially containing cleartext passwords, and lacks a warning about reviewing this archive to detect included passwords, which might allow remote attackers to obtain sensitive information by leveraging access to a technical-support data stream.