Description
A certain incorrect Sun Solaris 10 image on SPARC Enterprise T5120 and T5220 servers has /etc/default/login and /etc/ssh/sshd_config files that configure root logins in a manner unintended by the vendor, which allows remote attackers to gain privileges via unspecified vectors.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://www.vupen.com/english/advisories/2008/0810/references ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41332 ↗
- http://secunia.com/advisories/29529 ↗
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-231244-1 ↗
- http://www.securitytracker.com/id?1019708 ↗
- http://www.securityfocus.com/bid/28469 ↗