Vulnerability in Sun Solaris

CVE-2007-6505

Solaris 9, with Solaris Auditing enabled and certain patches for sshd installed, can generate audit records with an audit-ID of 0 even when the user logging into ssh is not root, which makes it easier for attackers to avoid detection and can make it more difficult to conduct forensics activities.

EPSS: 0.008 (51.4th percentile) — read the EPSS interpretation.

Affected products

Sun Solaris — versions 9
N/a — versions n/a

Weakness classification (CWE)

CWE-16

References

cve@mitre.org (vendor-advisory, x_refsource_SUNALERT)
cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (x_refsource_OSVDB, vdb-entry)
cve@mitre.org (signature, x_refsource_OVAL, vdb-entry)
cve@mitre.org (vendor-advisory, Patch, x_refsource_SUNALERT)