CVE-2004-0654: Low severity Sun SunOS vulnerability
Unknown vulnerability in the Basic Security Module (BSM), when configured to audit either the Administrative (ad) or the System-Wide Administration (as) audit class in Solaris 7, 8, and 9, allows local users to cause a denial of service (kernel panic).
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2004-0654?
CVE-2004-0654 is considered a high severity vulnerability as it can cause a denial of service resulting in kernel panic.
How do I fix CVE-2004-0654?
To fix CVE-2004-0654, you should apply the latest patches provided by the vendor for Solaris versions 7, 8, and 9.
Who is affected by CVE-2004-0654?
CVE-2004-0654 affects local users of Solaris 7, 8, and 9 when the Basic Security Module is configured to audit specific categories.
What types of attacks can exploit CVE-2004-0654?
CVE-2004-0654 can be exploited by local users to trigger a denial of service attack, leading to a system crash.
Is there a workaround for CVE-2004-0654?
As a workaround for CVE-2004-0654, consider disabling the auditing for the Administrative or System-Wide Administration classes until a patch is applied.