PT-2004-2274 · Sun · Sun Solaris 9

Published 2004-04-07 · Updated 2017-10-11 · CVE-2004-1357

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions: Sun Solaris 9

Description: The Secure Shell (SSH) Daemon (SSHD) in Sun Solaris 9 has an issue where it does not properly log IP addresses when SSHD is configured with the ListenAddress as 0.0.0.0. This makes it easier for remote attackers to hide the source of their activities.

Recommendations: For Sun Solaris 9, consider reconfiguring SSHD to listen on a specific IP address instead of 0.0.0.0 to improve logging capabilities. At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Related Identifiers

CVE-2004-1357

Affected Products

Sun Solaris 9

References · 8

• http://securityfocus.com/bid/10080 · Patch
• http://auscert.org.au/render.html?it=4003 · Vendor Advisory
• http://kb.cert.org/vuls/id/737548 · Patch
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-57538-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-1357 · Security Note
• http://secunia.com/advisories/11316 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15784 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3505 · Note