Vulnerability Name: | CVE-2001-1414 (CCN-11841) | ||||||||
Assigned: | 2001-10-09 | ||||||||
Published: | 2001-10-09 | ||||||||
Updated: | 2018-10-30 | ||||||||
Summary: | The Basic Security Module (BSM) for Solaris 2.5.1, 2.6, 7, and 8 does not log anonymous FTP access, which allows remote attackers to hide their activities, possibly when certain BSM audit files are not present under the FTP root. | ||||||||
CVSS v3 Severity: | 7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
| ||||||||
CVSS v2 Severity: | 7.5 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)
| ||||||||
Vulnerability Type: | CWE-Other | ||||||||
Vulnerability Consequences: | Other | ||||||||
References: | Source: MITRE Type: CNA CVE-2001-1414 Source: CCN Type: Sun Alert ID: 40521 Anonymous FTP Sessions are not Audited When the Basic Security Module (BSM) is Used Source: SUNALERT Type: Vendor Advisory 40521 Source: CCN Type: OSVDB ID: 14820 Solaris Basic Security Module Anonymous FTP Logging Failure Source: BID Type: UNKNOWN 7396 Source: CCN Type: BID-7396 Solaris Basic Security Module Insufficient Information Auditing Weakness Source: XF Type: UNKNOWN solaris-bsm-no-audit(11841) Source: XF Type: UNKNOWN solaris-bsm-no-audit(11841) | ||||||||
Vulnerable Configuration: | Configuration 1: Configuration CCN 1: ![]() | ||||||||
BACK |