CVE-2003-0722: Critical severity Sun Solaris vulnerability
The default installation of sadmind on Solaris uses weak authentication (AUTHSYS), which allows local and remote attackers to spoof Solstice AdminSuite clients and gain root privileges via a certain sequence of RPC packets.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Disable AUTH_SYS authentication for sadmind so the daemon does not accept AUTH_SYS (weak UNIX-style) credentials; this prevents attackers from spoofing Solstice AdminSuite clients and gaining root privileges.
sadmind (Solaris) AUTH_SYS authentication = disabled
Event History
Frequently Asked Questions
What is the severity of CVE-2003-0722?
CVE-2003-0722 is rated as a high severity vulnerability due to the potential for attackers to gain root privileges.
How do I fix CVE-2003-0722?
To fix CVE-2003-0722, disable the sadmind RPC service or implement stronger authentication mechanisms.
What systems are affected by CVE-2003-0722?
CVE-2003-0722 affects default installations of Oracle Solaris, particularly on SPARC systems.
Can CVE-2003-0722 be exploited remotely?
Yes, CVE-2003-0722 can be exploited remotely as it allows attackers to send specific RPC packets to the vulnerable service.
What is sadmind in relation to CVE-2003-0722?
Sadmind is a service on Solaris that manages the Solstice AdminSuite, which is vulnerable due to weak authentication in CVE-2003-0722.