Lucene search
HistoryAug 16, 2005 - 4:00 a.m.
CVE-2004-2306
cve-2004-2306
sun solaris
bsm
security hardening
sunwscpu
audit_warn
mail alerts
escape detection
nvd
7 High
AI Score
Confidence
Low
4.6 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
0.001 Low
EPSS
Percentile
26.3%
Sun Solaris 7 through 9, when Basic Security Module (BSM) is enabled and the SUNWscpu package has been removed as a result of security hardening, disables mail alerts from the audit_warn script, which might allow attackers to escape detection.
Affected configurations
Node
sunsolarisMatch7.0x86
ORsunsolarisMatch8.0x86
ORsunsolarisMatch9.0sparc
ORsunsolarisMatch9.0x86
ORsunsunosMatch5.7
ORsunsunosMatch5.8
| CPE | Name | Operator | Version |
|---|---|---|---|
| sun:solaris | sun solaris | eq | 7.0 |
| sun:solaris | sun solaris | eq | 8.0 |
| sun:solaris | sun solaris | eq | 9.0 |
| sun:sunos | sun sunos | eq | 5.7 |
| sun:sunos | sun sunos | eq | 5.8 |
7 High
AI Score
Confidence
Low
4.6 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
0.001 Low
EPSS
Percentile
26.3%
Related for CVE-2004-2306