Solaris 9, with Solaris Auditing enabled and certain patches for sshd installed, can generate audit records with an audit-ID of 0 even when the user logging into ssh is not root, which makes it easier for malicious users to avoid detection and can make it more difficult to conduct forensics activities.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
sun solaris 9 |
Vulmon