NVD

Id
58500  
Name
CVE-2007-6505  
Description
Solaris 9, with Solaris Auditing enabled and certain patches for sshd installed, can generate audit records with an audit-ID of 0 even when the user logging into ssh is not root, which makes it easier for attackers to avoid detection and can make it more difficult to conduct forensics activities.  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2007-12-20  
Modified Date
2008-11-15  
Seq
2007-6505  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
300158 58500 CVE-2007-6505 oval:org.mitre.oval:def:5282  View
300159 58500 CVE-2007-6505 103172  View
300160 58500 CVE-2007-6505 201310  View
300161 58500 CVE-2007-6505 solaris-sshaudit-weak-security(39185)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52378 JVNDB-2007-001068 Sun Solaris の sshd における監査 ID が 0 として記録される問題 Sun Solaris には、sshd の特定のパッチが適用され、監査機能が有効になっている場合、SSH でログインしたユーザ (root 以外) の監査 ID が 0 として、監査レコードに生成される問題があります。 CVE-2007-6505 29860 CVE-2007-6505 58500 3.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001068.html 2007-12-18 2008-01-16 View