PT-2004-2274 · Sun · Sun Solaris 9

Publicado 2004-04-07 · Atualizado 2017-10-11 · CVE-2004-1357

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions: Sun Solaris 9

Description: The Secure Shell (SSH) Daemon (SSHD) in Sun Solaris 9 has an issue where it does not properly log IP addresses when SSHD is configured with the ListenAddress as 0.0.0.0. This makes it easier for remote attackers to hide the source of their activities.

Recommendations: For Sun Solaris 9, consider reconfiguring SSHD to listen on a specific IP address instead of 0.0.0.0 to improve logging capabilities. At the moment, there is no information about a newer version that contains a fix for this issue.

Correção

Identificadores relacionados

CVE-2004-1357

Produtos afetados

Sun Solaris 9

Referências · 8

• http://securityfocus.com/bid/10080 · Correção
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15784 · Nota
• http://auscert.org.au/render.html?it=4003 · Aviso do Fabricante
• http://kb.cert.org/vuls/id/737548 · Correção
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-57538-1 · Aviso do Fabricante
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3505 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-1357 · Nota de Segurança
• http://secunia.com/advisories/11316 · Aviso do Fabricante