Description
The Basic Security Module (BSM) for Solaris 2.5.1, 2.6, 7, and 8 does not log anonymous FTP access, which allows remote attackers to hide their activities, possibly when certain BSM audit files are not present under the FTP root.
References
- 40521 vendor-advisory
- 7396 vdb-entry
- solaris-bsm-no-audit(11841) vdb-entry