CVE-2007-6505 in Solaris
Summary
Solaris 9, with Solaris Auditing enabled and certain patches for sshd installed, can generate audit records with an audit-ID of 0 even when the user logging into ssh is not root, which makes it easier for attackers to avoid detection and can make it more difficult to conduct forensics activities.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Reservation
12/20/2007
Disclosure
12/20/2007
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 40211 | Sun Solaris Auditing config | 16 | Not defined | Not defined | CVE-2007-6505 |