CVE-2004-0653: Sun Solaris

Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days.

Solaris 9, when configured as a Kerberos client with patch 112908-12 or 115168-03 and using pam_krb5 as an "auth" module with the debug feature enabled, records passwords in plaintext, which could allow local users to gain other user's passwords by reading log files.

Affected products

• Sun Solaris: version 9.0 only

Published 2004-08-06. Last modified 2026-06-16.