CVE-2004-2306: Medium severity sun sunos vulnerability
Sun Solaris 7 through 9, when Basic Security Module (BSM) is enabled and the SUNWscpu package has been removed as a result of security hardening, disables mail alerts from the auditwarn script, which might allow attackers to escape detection.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2004-2306?
CVE-2004-2306 is considered a medium severity vulnerability due to its potential for allowing attackers to evade detection.
How do I fix CVE-2004-2306?
To fix CVE-2004-2306, re-enable the SUNWscpu package or ensure that audit mail alerts are properly configured regardless of its removal.
What software versions are affected by CVE-2004-2306?
CVE-2004-2306 affects Sun Solaris versions 7 through 9 when the Basic Security Module (BSM) is enabled.
What are the implications of CVE-2004-2306?
The implications of CVE-2004-2306 include an increased risk that unauthorized actions may go unmonitored due to disabled mail alerts.
How can I determine if my system is vulnerable to CVE-2004-2306?
To determine if your system is vulnerable to CVE-2004-2306, check if the SUNWscpu package has been removed and if BSM is enabled.