CVE-2004-0654 - Unknown vulnerability in the Basic Security Module (BSM), when configured to audit either the Admini

CVE-2004-0654

Summary

Unknown vulnerability in the Basic Security Module (BSM), when configured to audit either the Administrative (ad) or the System-Wide Administration (as) audit class in Solaris 7, 8, and 9, allows local users to cause a denial of service (kernel panic).

References

Vulnerable Configurations

cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*
cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*
cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*
cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*
cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*
cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*
cpe:2.3:o:sun:solaris:9.0:*:x86:*:*:*:*:*
cpe:2.3:o:sun:solaris:9.0:*:x86:*:*:*:*:*
cpe:2.3:o:sun:solaris:9.0:x86_update_2:*:*:*:*:*:*
cpe:2.3:o:sun:solaris:9.0:x86_update_2:*:*:*:*:*:*
cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*
cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*
cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*
cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*

CVSS

Base:	2.1 (as of 30-10-2018 - 16:26)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
LOCAL	LOW	NONE

Impact

Confidentiality	Integrity	Availability
NONE	NONE	PARTIAL

cvss-vector via4

AV:L/AC:L/Au:N/C:N/I:N/A:P

oval via4

accepted

2016-02-19T10:00:00.000-04:00

class

vulnerability

contributors

name Brian Soby
organization The MITRE Corporation
name Sudhir Gandhe
organization Secure Elements, Inc.

description

family

unix

oval:org.mitre.oval:def:2426

status

accepted

submitted

2004-10-12T09:40:00.000-04:00

title

BSM Audit Kernel Panic

version

refmap via4

bid	10594
cert-vn	VU#901582
secunia	11930
sunalert	57497
xf	solaris-bsm-audit-dos(16483)

Last major update

30-10-2018 - 16:26

Published

06-08-2004 - 04:00

Last modified

30-10-2018 - 16:26