CVE-2007-6505
Solaris 9, with Solaris Auditing enabled and certain patches for sshd installed, can generate...
Solaris 9, with Solaris Auditing enabled and certain patches for sshd installed, can generate audit records with an audit-ID of 0 even when the user logging into ssh is not root, which makes it easier for attackers to avoid detection and can make it more difficult to conduct forensics activities.
Exploit likelihood
What each source reports
NVD Score used
Solaris 9, with Solaris Auditing enabled and certain patches for sshd installed, can generate audit records with an audit-ID of 0 even when the user logging into ssh is not root, which makes it easier for attackers to avoid detection and can make it more difficult to conduct forensics activities.
- Record
CVE-2007-6505- CVSS 2.0
- 3.5 Low
AV:N/AC:M/Au:S/C:P/I:N/A:N - Weakness
- CWE-16
- Updated
- 2026-11-02
CVE List No score
Solaris 9, with Solaris Auditing enabled and certain patches for sshd installed, can generate audit records with an audit-ID of 0 even when the user logging into ssh is not root, which makes it easier for attackers to avoid detection and can make it more difficult to conduct forensics activities.
- Record
CVE-2007-6505- Updated
- 2026-11-02
EUVDEUVD-2007-6471 No score
Solaris 9, with Solaris Auditing enabled and certain patches for sshd installed, can generate audit records with an audit-ID of 0 even when the user logging into ssh is not root, which makes it easier for attackers to avoid detection and can make it more difficult to conduct forensics activities.
- Record
EUVD-2007-6471- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-gghp-cf4v-c825 No score
Solaris 9, with Solaris Auditing enabled and certain patches for sshd installed, can generate...
Solaris 9, with Solaris Auditing enabled and certain patches for sshd installed, can generate audit records with an audit-ID of 0 even when the user logging into ssh is not root, which makes it easier for attackers to avoid detection and can make it more difficult to conduct forensics activities.
- Record
GHSA-gghp-cf4v-c825- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| aliases, references, title | GitHub Advisories | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-6505 is a low vulnerability (CVSS 3.5) in Sun Solaris, published December 20, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.76%, the 55th percentile. No source names a fixed version.
References
sunsolve.sun.com/search/document.do?assetkey=1-66-201310-1
exchange.xforce.ibmcloud.com/vulnerabilities/39185
osvdb.org/44332
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5282
nvd.nist.gov/vuln/detail/CVE-2007-6505
github.com/advisories/GHSA-gghp-cf4v-c825