PT-2007-7339 · Openssh+1 · Sshd+1

Publicado 2007-12-20 · Atualizado 2017-09-29 · CVE-2007-6505

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Baixa

Vetor base

AV:N/AC:M/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Sun Solaris version 9

Description The issue allows attackers to avoid detection and makes it more difficult to conduct forensics activities by generating audit records with an audit-ID of 0, even when a non-root user logs into ssh. This occurs when Solaris Auditing is enabled and certain patches for sshd are installed.

Recommendations For Sun Solaris version 9, consider disabling the Solaris Auditing feature or removing the installed sshd patches as a temporary workaround to prevent the generation of audit records with an audit-ID of 0 for non-root users. However, at the moment, there is no information about a newer version that contains a fix for this issue.

Correção

Enumeração de Fraquezas

CWE-16

Identificadores relacionados

CVE-2007-6505

Produtos afetados

Sun Solaris

Sshd

Referências · 6

• http://sunsolve.sun.com/search/document.do?assetkey=1-66-201310-1 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39185 · Nota
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-103172-1 · Correção, Aviso do Fabricante
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5282 · Nota
• http://osvdb.org/44332 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-6505 · Nota de Segurança