CVE-2003-1063 Misconfiguration in n/a
Solaris patches for cachefs overwrite inetd.conf, silently re-enabling disabled services and allowing remote attackers to bypass security policies.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2003-1063?
CVE-2003-1063 is a high-severity vulnerability in Sun Solaris, published on 8 Feb 2005. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The patches (1) 105693-13, (2) 108800-02, (3) 105694-13, and (4) 108801-02 for cachefs on Solaris 2.6 and 7 overwrite the inetd.conf file, which may silently reenable services and allow remote attackers to bypass the intended security policy.
Which versions are affected by CVE-2003-1063?
It affects 2 products.
Products include Sun Solaris, Sun Sunos.
How do I fix CVE-2003-1063?
No fix has been published for CVE-2003-1063 yet. Limit exposure of the affected software until one is available.
Is CVE-2003-1063 being exploited?
There is no known exploitation of CVE-2003-1063 in the wild and no public exploit code.
Other vulnerabilities in Sun Solaris
Sources
Also known as GHSA-j247-m687-9hwv.