Sun Basic Security Module Audit_warn Warning Message Email Failure Weakness

Bugtraq ID:	13724
Class:	Configuration Error
CVE:
Remote:	No
Local:	Yes
Published:	Feb 03 2004 12:00AM
Updated:	Feb 03 2004 12:00AM
Credit:	This issue was announced by Sun.
Vulnerable:	Sun Solaris 9_x86 Sun Solaris 9 Sun Solaris 8_x86 Sun Solaris 8_sparc Sun Solaris 7.0_x86 Sun Solaris 7.0
Not Vulnerable:

Sun Basic Security Module Audit_warn Warning Message Email Failure Weakness

Under some configurations the BSM audit_warn(1M) script does not email errors or warning messages that are generated by the audit daemon.

An attacker may take advantage of this issue when exploiting a vulnerability. Due to the nature of the application, this would create a false sense of security as the administrator would not receive potentially security related errors or warning messages.

Sun Basic Security Module Audit_warn Warning Message Email Failure Weakness

An exploit is not required.

Sun Basic Security Module Audit_warn Warning Message Email Failure Weakness

Solution:
Sun has released an advisory (Sun Alert ID:57483) to address this issue.


Sun Solaris 9_x86

• Sun 116248-01
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -116248-01-1

Sun Solaris 8_x86

• Sun 116611-01
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -116611-01-1

Sun Solaris 8_sparc

• Sun 116610-01
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -116610-01-1

Sun Solaris 9

• Sun 116247-01
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -116247-01-1

Sun Basic Security Module Audit_warn Warning Message Email Failure Weakness

References:

• Sun Alert ID:102513 (Sun)