CVE-2008-1369
Severity CVSS v4.0:
Pending analysis
Type:
CWE-264
Permissions, Privileges, and Access Control
Publication date:
18/03/2008
Last modified:
09/04/2025
Description
A certain incorrect Sun Solaris 10 image on SPARC Enterprise T5120 and T5220 servers has /etc/default/login and /etc/ssh/sshd_config files that configure root logins in a manner unintended by the vendor, which allows remote attackers to gain privileges via unspecified vectors.
Impact
Base Score 2.0
10.00
Severity 2.0
HIGH
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:o:sun:sunos:5.10:*:*:*:*:*:*:* | ||
cpe:2.3:h:sun:sparc_enterprise_server:t5120:*:*:*:*:*:*:* | ||
cpe:2.3:h:sun:sparc_enterprise_server:t5220:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page
References to Advisories, Solutions, and Tools
- http://secunia.com/advisories/29529
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-231244-1
- http://www.securityfocus.com/bid/28469
- http://www.securitytracker.com/id?1019708=
- http://www.vupen.com/english/advisories/2008/0810/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41332
- http://secunia.com/advisories/29529
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-231244-1
- http://www.securityfocus.com/bid/28469
- http://www.securitytracker.com/id?1019708=
- http://www.vupen.com/english/advisories/2008/0810/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41332