CVE-2001-0077 The clustmon service in Sun Cluster 2.x does not require authentication, which allows remote attackers to obtain sensitive information such as system logs and cluster configurations.
MediumCVSS 5.0
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The clustmon service in Sun Cluster 2.x does not require authentication, which allows remote attackers to obtain sensitive information such as system logs and cluster configurations.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sun cluster | = 2.0 | No fix listed |
References
- 20001212 Two Holes in Sun Cluster 2.x mailing-list vendor-advisory
- clustmon-no-authentication(6123) vdb-entry