National Vulnerability Database (CVE-2003-0722)

National Cyber-Alert System Vulnerability Summary: CVE-2003-0722
Orirignal release date: 2003-09-22 Source: US-CERT/NIST ### Overview The default installation of sadmind on Solaris uses weak authentication (AUTH_SYS), which allows local and remote attackers to spoof Solstice AdminSuite clients and gain root privileges via a certain sequence of RPC packets. ### Impact CVSS Severity: 10 (High) Range: local,remote Authentication: design Impact Type: sec_prot admin="1" ### Reference to Advisories, Solutions, and Tools External Source: MISC Name: http://www.idefense.com/advisory/09.16.03.txt Hyperlink: http://www.idefense.com/advisory/09.16.03.txt External Source: BUGTRAQ Name: amp Hyperlink: http://marc.theaimsgroup.com/?l=bugtraq& External Source: VULNWATCH Name: 20030918 Solaris SADMIND Exploitation Hyperlink: http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0115.html External Source: SUNALERT Name: amp Hyperlink: http://sunsolve.sun.com/search/document.do?assetkey=1-26-56740-1& External Source: CERT-VN Name: VU#41870 Hyperlink: http://www.kb.cert.org/vuls/id/41870 External Source: CIAC Name: N-148 Hyperlink: http://www.ciac.org/ciac/bulletins/n-148.shtml External Source: BID Name: 8615 Hyperlink: http://www.securityfocus.com/bid/8615 External Source: OVAL Name: OVAL1273 Hyperlink: http://oval.mitre.org/oval/definitions/data/oval1273.html External Source: SECUNIA Name: 9742 Hyperlink: http://secunia.com/advisories/9742 ### Vulnerable Software and Vendor Solaris (Sun) Technical Details CVE Standard Vulnerability Entry: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0722