Security Advisory

CVE-2003-0722

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2003-09-17 04:00:00
Last updated 2024-08-08 02:05:12
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

The default installation of sadmind on Solaris uses weak authentication (AUTH_SYS), which allows local and remote attackers to spoof Solstice AdminSuite clients and gain root privileges via a certain sequence of RPC packets.