The default installation of sadmind on Solaris uses weak authentication (AUTH_SYS), which allows local and remote attackers to spoof Solstice AdminSuite clients and gain root privileges via a certain sequence of RPC packets.
References
Configurations
Information
Published : 2003-09-21 21:00
Updated : 2017-10-10 18:29
NVD link : CVE-2003-0722
Mitre link : CVE-2003-0722
JSON object : View
CWE
Products Affected
sun
- solaris