Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The default installation of sadmind on Solaris uses weak authentication (AUTH_SYS), which allows local and remote attackers to spoof Solstice AdminSuite clients and gain root privileges via a certain sequence of RPC packets.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Sun Solaris sadmind远程执行命令漏洞
Vulnerability Description
sadmind是Solaris所带的一个守护程序，Solstice AdminSuite应用程序通过它来执行分布式的系统管理操作。 Sun sadmind的验证实现存在问题，远程攻击者可以利用这个漏洞以root用户权限在系统上执行任意命令。 Sun sadmind的验证实现有三个安全等级用来判断客户端是否有权在服务器上执行某个操作。如果安全等级为0，则将所有客户端的用户和组标识设置为nobody，然后判断是否nobody用户或组有权限访问某个操作，这仅用于测试目的。第二个等级是1，这时将认证类型设为WEA
CVSS Information
N/A
Vulnerability Type
N/A