NVD

Id
73828  
Name
CVE-2003-0722  
Description
The default installation of sadmind on Solaris uses weak authentication (AUTH_SYS), which allows local and remote attackers to spoof Solstice AdminSuite clients and gain root privileges via a certain sequence of RPC packets.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2003-09-22  
Modified Date
2016-10-17  
Seq
2003-0722  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
379681 73828 CVE-2003-0722 20030918 Solaris SADMIND Exploitation  View
379682 73828 CVE-2003-0722 20030918 Solaris SADMIND Exploitation  View
379683 73828 CVE-2003-0722 oval:org.mitre.oval:def:1273  View
379684 73828 CVE-2003-0722 56740  View
379685 73828 CVE-2003-0722 N-148  View
379686 73828 CVE-2003-0722 http://www.idefense.com/advisory/09.16.03.txt  View
379687 73828 CVE-2003-0722 VU#41870  View
379688 73828 CVE-2003-0722 8615  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63550 JVNDB-2003-000276 Sun Solaris の sadmind 設定に任意のコードを実行される脆弱性 Sun Solaris の Solstice AdminSuite に含まれる sadmind の認証機構 (AUTH_SYS) の不備により、特定の RPC パケットを取り扱うことで正規のユーザへのなりすましを許す脆弱性が存在します。 CVE-2003-0722 7545 CVE-2003-0722 73828 10 http://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000276.html 2003-09-16 2007-04-01 View