Two vulnerabilities has been reported in Sun Solaris, which can be exploited by malicious users to gain escalated privileges.

1) An unspecified error within the logging mechanism in the Solaris Management Console (SMC) can be exploited to gain root privileges on an affected system.

2) An unspecified error within the authentication mechanism in the Solaris Management Console (SMC) can be exploited to gain root privileges on an affected system.

Successful exploitation requires that the SMC server is running on the system.

The vulnerabilities are reported in Solaris 8, 9, and 10 for both the SPARC and the x86 platforms.

Solution
Apply patches.
Further details available to Secunia VIM customers

Provided and/or discovered by
The vendor credits Adam Gowdiak.

Changelog
Further details available to Secunia VIM customers

Original Advisory
1) http://sunsolve.sun.com/search/document.do?assetkey=1-26-102903-1
2) http://sunsolve.sun.com/search/document.do?assetkey=1-26-102902-1

Deep Links
Links available to Secunia VIM customers