CVE-2003-0722 Auth bypass in n/a
Remote attackers can spoof Solstice AdminSuite clients via RPC packets to gain root privileges due to weak default authentication in sadmind.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2003-0722?
CVE-2003-0722 is a critical authentication bypass vulnerability in Sun Solaris, published on 17 Sep 2003. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The default installation of sadmind on Solaris uses weak authentication (AUTH_SYS), which allows local and remote attackers to spoof Solstice AdminSuite clients and gain root privileges via a certain sequence of RPC packets.
Which versions are affected by CVE-2003-0722?
It affects 1 product.
Products include Sun Solaris.
How do I fix CVE-2003-0722?
No fix has been published for CVE-2003-0722 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2003-0722 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2003-0722 exists.
Public exploit code: 1 Metasploit module and 2 Exploit-DB entries.
Other vulnerabilities in Sun Solaris
Sources
Also known as GHSA-qpx7-pvpr-53xp.