CVE-2007-6505
Severity Score
3.5
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Solaris 9, with Solaris Auditing enabled and certain patches for sshd installed, can generate audit records with an audit-ID of 0 even when the user logging into ssh is not root, which makes it easier for attackers to avoid detection and can make it more difficult to conduct forensics activities.
Solaris 9, con Solaris Auditing habilitado y ciertos parches sshd instalados, pueden generar registros de auditoría con un con una auditoría - ID de 0 incluso cuando el usuario acceda a al ssh sin ser root, lo cual hace más fácil para atacantes evitar detecciones y poder hacerlo más dificil llevar a cabo actividades forenses.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2007-12-20 CVE Reserved
- 2007-12-20 CVE Published
- 2024-08-07 CVE Updated
- 2024-09-15 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-16: Configuration
CAPEC
References (5)
| URL | Tag | Source |
|---|---|---|
| http://osvdb.org/44332 | Vdb Entry | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/39185 | Vdb Entry | |
| https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5282 | Signature |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://sunsolve.sun.com/search/document.do?assetkey=1-26-103172-1 | 2017-09-29 |
| URL | Date | SRC |
|---|---|---|
| http://sunsolve.sun.com/search/document.do?assetkey=1-66-201310-1 | 2017-09-29 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Sun Search vendor "Sun" | Solaris Search vendor "Sun" for product "Solaris" | 9 Search vendor "Sun" for product "Solaris" and version "9" | sparc |
Affected
| ||||||
| Sun Search vendor "Sun" | Solaris Search vendor "Sun" for product "Solaris" | 9 Search vendor "Sun" for product "Solaris" and version "9" | x86 |
Affected
| ||||||