CVE-2004-2306 Security feature bypass in n/a
Attackers can evade detection on hardened Solaris systems where BSM is enabled and SUNWscpu is removed, as mail alerts are disabled.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Not stated
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2004-2306?
CVE-2004-2306 is a medium-severity vulnerability in Sun Solaris, published on 16 Aug 2005.
Official description
Sun Solaris 7 through 9, when Basic Security Module (BSM) is enabled and the SUNWscpu package has been removed as a result of security hardening, disables mail alerts from the audit_warn script, which might allow attackers to escape detection.
Which versions are affected by CVE-2004-2306?
It affects 2 products.
Products include Sun Solaris, Sun Sunos.
How do I fix CVE-2004-2306?
No fix has been published for CVE-2004-2306 yet. Limit exposure of the affected software until one is available.
Is CVE-2004-2306 being exploited?
There is no known exploitation of CVE-2004-2306 in the wild and no public exploit code.
Other vulnerabilities in Sun Solaris
Sources
Also known as GHSA-mrmx-49j9-w35c.