CVE-2001-1414

CVE-2001-1414 describes a vulnerability in the Basic Security Module (BSM) of Solaris versions 2.5.1, 2.6, 7, and 8, where anonymous FTP access is not logged. This oversight allows remote attackers to conceal their activities, particularly if specific BSM audit files are missing from the FTP root directory. The vulnerability carries a CVSS score of 7.5 (HIGH), indicating a significant risk. It is easily exploitable over the network with low attack complexity and no authentication required, potentially leading to partial compromise of confidentiality, integrity, and availability. Despite its high severity, there is no evidence of active exploitation, and no public exploit code is available on platforms like Metasploit, Nuclei, or ExploitDB. The CVE has garnered no community discussion or media coverage, suggesting a lack of widespread attention.