CVE-2004-2306

CVE-2004-2306 describes a vulnerability in Sun Solaris versions 7 through 9 where the removal of the SUNWscpu package, often done for security hardening, disables mail alerts from the audit_warn script when Basic Security Module (BSM) is enabled. This oversight could allow attackers to operate undetected by preventing critical audit notifications. The vulnerability has a CVSS score of 4.6, indicating a low severity with local access, low attack complexity, and potential for partial confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, nor are there known public exploits in Metasploit, Nuclei, or ExploitDB, though it has garnered significant community discussion with 10 mentions.