CVE-2003-0722 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2003-0722
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2003-0722

Description: The default installation of sadmind on Solaris uses weak authentication (AUTH_SYS), which allows local and remote attackers to spoof Solstice AdminSuite clients and gain root privileges via a certain sequence of RPC packets.

CVE Status: Candidate

References: VULNWATCH http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0115.html SUNALERT http://sunsolve.sun.com/search/document.do?assetkey=1-26-56740-1&searchclause=security SAID Secunia Advisory: SA9742 OVAL http://oval.mitre.org/oval/definitions/data/oval1273.html MISC http://www.idefense.com/advisory/09.16.03.txt CIAC http://www.ciac.org/ciac/bulletins/n-148.shtml CERT-VN 41870 BUGTRAQ http://marc.theaimsgroup.com/?l=bugtraq&m=106391959014331&w=2 BID 8615

Return to the previous page.