Unlogged Anonymous FTP Access Vulnerability in Solaris BSM

Unlogged Anonymous FTP Access Vulnerability in Solaris BSM

CVE-2001-1414 · HIGH Severity

AV:N/AC:L/AU:N/C:P/I:P/A:P

The Basic Security Module (BSM) for Solaris 2.5.1, 2.6, 7, and 8 does not log anonymous FTP access, which allows remote attackers to hide their activities, possibly when certain BSM audit files are not present under the FTP root.

Learn more about our Cis Benchmark Audit For Oracle Solaris.