PT-2007-7339 · Openssh+1 · Sshd+1

Published 2007-12-20 · Updated 2017-09-29 · CVE-2007-6505

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Low

Base vector

AV:N/AC:M/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Sun Solaris version 9

Description The issue allows attackers to avoid detection and makes it more difficult to conduct forensics activities by generating audit records with an audit-ID of 0, even when a non-root user logs into ssh. This occurs when Solaris Auditing is enabled and certain patches for sshd are installed.

Recommendations For Sun Solaris version 9, consider disabling the Solaris Auditing feature or removing the installed sshd patches as a temporary workaround to prevent the generation of audit records with an audit-ID of 0 for non-root users. However, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Weakness Enumeration

CWE-16

Related Identifiers

CVE-2007-6505

Affected Products

Sun Solaris

Sshd

References · 6

• http://sunsolve.sun.com/search/document.do?assetkey=1-66-201310-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-6505 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39185 · Note
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-103172-1 · Patch, Vendor Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5282 · Note
• http://osvdb.org/44332 · Note