PT-2004-3200 · Sun · Sun Solaris

Publicado 2004-12-31 · Atualizado 2018-10-30 · CVE-2004-2306

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Sun Solaris versions 7 through 9

Description: The issue occurs when the Basic Security Module (BSM) is enabled and the SUNWscpu package has been removed due to security hardening. This configuration disables mail alerts from the audit warn script, potentially allowing attackers to evade detection.

Recommendations: For Sun Solaris versions 7 through 9, consider re-enabling or reinstalling the SUNWscpu package to restore mail alerts from the audit warn script, or implement an alternative monitoring solution to detect potential security incidents.

Correção

Identificadores relacionados

CVE-2004-2306

Produtos afetados

Sun Solaris

Referências · 5

• http://securityfocus.com/bid/13724 · Correção
• http://ciac.org/ciac/bulletins/o-070.shtml · Aviso do Fabricante
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-57483-1 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2004-2306 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15042 · Nota