10
CVSSv2

CVE-2003-0722

Published: 22/09/2003 Updated: 11/10/2017
CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10
VMScore: 1000
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Summary

The default installation of sadmind on Solaris uses weak authentication (AUTH_SYS), which allows local and remote malicious users to spoof Solstice AdminSuite clients and gain root privileges via a certain sequence of RPC packets.

Vulnerable Product Search on Vulmon Subscribe to Product

sun solaris

Exploits

#!/usr/bin/perl -w ################## ## # Title: rootdownpl # Purpose: Solaris Remote command executiong via sadmind # Author: H D Moore hdm at metasploitcom # Copyright: Copyright (C) 2003 METASPLOITCOM ## use strict; use POSIX; use IO::Socket; use IO::Select; use Getopt::Std; my $VERSION = "10"; my %opts; getopts("h: ...
## # $Id: sadmind_execrb 9583 2010-06-22 19:11:05Z todb $ ## ## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions Please see the Metasploit # Framework web site for more information on licensing and terms of use # metasploitcom/framework/ ## require 'msf/core' class Meta ...