Description
The Secure Shell (SSH) Daemon (SSHD) in Sun Solaris 9 does not properly log IP addresses when SSHD is configured with the ListenAddress as 0.0.0.0, which makes it easier for remote attackers to hide the source of their activities.
References
- 57538 vendor-advisory
- solaris-sshd-log-bypass(15784) vdb-entry
- VU#737548 third-party-advisory
- oval:org.mitre.oval:def:3505 vdb-entry signature
- 10080 vdb-entry
- 11316 third-party-advisory
- ESB-2004.0263 third-party-advisory