Vulnerability Details CVE-2004-1358
The patches (1) 114332-08 and (2) 114929-06 for Sun Solaris 9 disable the auditing functionality of the Basic Security Module (BSM), which allows attackers to avoid having their activity logged.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 66.6%
CVSS Severity
CVSS v2 Score 5.0
References
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-57478-1&searchclause=%22category:security%22%20%20114332-08
- http://www.auscert.org.au/render.html?it=3788
- http://www.ciac.org/ciac/bulletins/o-099.shtml
- http://www.securityfocus.com/bid/9852
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14918
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3567
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-57478-1&searchclause=%22category:security%22%20%20114332-08
- http://www.auscert.org.au/render.html?it=3788
- http://www.ciac.org/ciac/bulletins/o-099.shtml
- http://www.securityfocus.com/bid/9852
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14918
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3567