CVE-2004-0654: Unknown vulnerability in the Basic Security Module (BSM), when configured to audit either the Administrativ...

Security readout for executives and security teams

This is a local denial-of-service issue in old Solaris systems. If BSM auditing is configured for administrative audit classes, a local user may be able to trigger a kernel panic, causing the server to crash. The sources do not show internet-remote exploitation or active exploitation. Exposure is most likely in legacy Solaris 7, 8, or 9 environments where BSM auditing is enabled for ad or as audit classes. Modern estates without these Solaris versions are unlikely to be affected based on the provided sources. Treat this as a legacy-platform resilience issue, not an internet-wide emergency. Prioritize if affected Solaris systems support critical operations or allow multiple local users. Mitigation focus: Identify Solaris 7, 8, and 9 systems still in production or support inventories.; Confirm whether BSM auditing includes Administrative (ad) or System-Wide Administration (as) classes.; Review Sun Alert 57497 and CERT VU#901582 for applicable vendor remediation..

Prepared

Jun 30, 2026, 04:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.