CVE-2003-0722 The default installation of sadmind on Solaris uses weak authentication (AUTH_SYS), which allows local and remote attackers to spoof Solstice AdminSuite clients and gain root privileges via a certain....
HighCVSS 10.0
EPSS 88.8%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The default installation of sadmind on Solaris uses weak authentication (AUTH_SYS), which allows local and remote attackers to spoof Solstice AdminSuite clients and gain root privileges via a certain sequence of RPC packets.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sun solaris | All versions | No fix listed |
References
- 20030918 Solaris SADMIND Exploitation mailing-list
- 20030918 Solaris SADMIND Exploitation mailing-list
- 9742 third-party-advisory
- 56740 vendor-advisory
- N-148 government-resource third-party-advisory
- www.idefense.com
- VU#41870 third-party-advisory us-government-resource
- 8615 vdb-entry
- oval:org.mitre.oval:def:1273 signature vdb-entry