CVE-2001-1414 — Solaris vulnerability

3 documents3 sources
Severity
7.5HIGHNVD
EPSS
0.7%
top 27.53%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
SUN SolarisSUN Sunos
Timeline
PublishedOct 9
Latest updateApr 30

Description

The Basic Security Module (BSM) for Solaris 2.5.1, 2.6, 7, and 8 does not log anonymous FTP access, which allows remote attackers to hide their activities, possibly when certain BSM audit files are not present under the FTP root.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages2 packages

▶NVDsun/solaris4 versions+3
▶NVDsun/sunos5.5.1, 5.7, 5.8+2

🔴Vulnerability Details

2
GHSA
GHSA-c69p-hx28-phmq: The Basic Security Module (BSM) for Solaris 2↗2022-04-30
▶
CVEList
CVE-2001-1414: The Basic Security Module (BSM) for Solaris 2↗2005-02-08
▶
CVE-2001-1414 — SUN Solaris vulnerability | cvebase