Lucene search

[email protected]CVE-2001-1414

HistoryOct 09, 2001 - 4:00 a.m.

CVE-2001-1414

2001-10-0904:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2001-1414

security module

solaris

ftp access

nvd

7.7 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.032 Low

EPSS

Percentile

91.2%

JSON

The Basic Security Module (BSM) for Solaris 2.5.1, 2.6, 7, and 8 does not log anonymous FTP access, which allows remote attackers to hide their activities, possibly when certain BSM audit files are not present under the FTP root.

CPENameOperatorVersion
sun:solarissun solariseq2.5.1
sun:sunossun sunoseq5.7
sun:sunossun sunoseq5.8
sun:solarissun solariseq7.0
sun:sunossun sunoseq5.5.1
sun:solarissun solariseq2.6
sun:solarissun solariseq8.0
sun:sunossun sunoseq-

CPE	Name	Operator	Version
sun:solaris	sun solaris	eq	2.5.1
sun:sunos	sun sunos	eq	5.7
sun:sunos	sun sunos	eq	5.8
sun:solaris	sun solaris	eq	7.0
sun:sunos	sun sunos	eq	5.5.1
sun:solaris	sun solaris	eq	2.6
sun:solaris	sun solaris	eq	8.0
sun:sunos	sun sunos	eq	-

References

sunsolve.sun.com/search/document.do?assetkey=1-26-40521-1

www.securityfocus.com/bid/7396

exchange.xforce.ibmcloud.com/vulnerabilities/11841

7.7 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.032 Low

EPSS

Percentile

91.2%

JSON

Related for CVE-2001-1414

cvelist1