CVE-2003-0722 in Solaris

Summary

The default installation of sadmind on Solaris uses weak authentication (AUTH_SYS), which allows local and remote attackers to spoof Solstice AdminSuite clients and gain root privileges via a certain sequence of RPC packets.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Reservation: 09/02/2003
• Disclosure: 09/22/2003
• Moderation: VulDB entry created
• Entries: 1: VDB-20832
• CPE: ready
• CWE: CWE-287 (Confirmed)
• Exploit: Download
• CVSS: 9.8
• EPSS: 0.87095
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2003-0722
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2003-0722
• CVE Details: https://www.cvedetails.com/cve/CVE-2003-0722/