CVE-2004-1357: The Secure Shell (SSH) Daemon (SSHD) in Sun Solaris 9 does not properly log IP addresses when SSHD is confi...

Security readout for executives and security teams

This is an audit logging weakness in Solaris 9 SSHD. Under a specific listening configuration, SSH may not record client IP addresses correctly, making investigations and attribution harder. The source bundle does not show direct system compromise or confirmed active exploitation. Exposure appears limited to legacy Sun Solaris 9 systems running SSHD with ListenAddress configured as 0.0.0.0. Organizations without Solaris 9 or without this SSHD configuration are unlikely to be affected based on the provided evidence. Treat this as a legacy-platform visibility risk. It does not indicate direct compromise, but it can weaken incident response on Solaris 9 systems. Prioritize if those systems handle sensitive access or remain internet reachable. Mitigation focus: Check Sun advisory 57538 and current vendor guidance for applicable fixes.; Inventory any remaining Solaris 9 systems running SSHD.; Avoid ListenAddress 0.0.0.0 where vendor guidance and operations permit..

Prepared

Jun 30, 2026, 01:38 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.