CVE-2004-1358

Sun Solaris 9 - Privilege Escalation

Title source: llm
STIX 2.1

Description

The patches (1) 114332-08 and (2) 114929-06 for Sun Solaris 9 disable the auditing functionality of the Basic Security Module (BSM), which allows attackers to avoid having their activity logged.

References (6)

Core 6
Core References
Patch, Vendor Advisory third-party-advisory x_refsource_auscert
http://www.auscert.org.au/render.html?it=3788
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/14918
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3567
Patch vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/9852
Patch, Vendor Advisory third-party-advisory government-resource x_refsource_ciac
http://www.ciac.org/ciac/bulletins/o-099.shtml

Scores

EPSS 0.0054
EPSS Percentile 67.8%

Details

Status published
Products (1)
sun/solaris 9.0 (2 CPE variants)
Published Mar 12, 2004
Tracked Since Feb 18, 2026