CVE-2003-1071: Low severity Sun Solaris vulnerability
rpc.walld (wall daemon) for Solaris 2.6 through 9 allows local users to send messages to logged on users that appear to come from arbitrary user IDs by closing stderr before executing wall, then supplying a spoofed from header.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2003-1071?
CVE-2003-1071 is considered a medium severity vulnerability, as it allows local users to send spoofed messages to other logged-in users.
How do I fix CVE-2003-1071?
To remediate CVE-2003-1071, restrict access to the wall daemon or apply patches provided by the vendor for affected Solaris versions.
Who is affected by CVE-2003-1071?
CVE-2003-1071 affects local users of Solaris versions 2.5.1 to 9.0 and SunOS 5.5.1 to 5.8.
What impact does CVE-2003-1071 have on affected systems?
CVE-2003-1071 allows local users to impersonate other users by sending messages, potentially leading to user confusion or exploitation.
Is CVE-2003-1071 a remote or local vulnerability?
CVE-2003-1071 is a local vulnerability, meaning it can only be exploited by authenticated users on the same system.