CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
Confidence
Low
EPSS
Percentile
91.2%
The Basic Security Module (BSM) for Solaris 2.5.1, 2.6, 7, and 8 does not log anonymous FTP access, which allows remote attackers to hide their activities, possibly when certain BSM audit files are not present under the FTP root.
Vendor | Product | Version | CPE |
---|---|---|---|
sun | solaris | 2.5.1 | cpe:2.3:o:sun:solaris:2.5.1:*:x86:*:*:*:*:* |
sun | solaris | 2.6 | cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:* |
sun | solaris | 7.0 | cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:* |
sun | solaris | 8.0 | cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:* |
sun | sunos | - | cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:* |
sun | sunos | 5.5.1 | cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:* |
sun | sunos | 5.7 | cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:* |
sun | sunos | 5.8 | cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:* |