Lucene search
HistoryMar 18, 2008 - 5:44 p.m.
CVE-2008-1369
cve-2008-1369
sun solaris
sparc
enterprise t5120
enterprise t5220
ssh
privilege escalation
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
6.9 Medium
AI Score
Confidence
Low
0.011 Low
EPSS
Percentile
84.7%
A certain incorrect Sun Solaris 10 image on SPARC Enterprise T5120 and T5220 servers has /etc/default/login and /etc/ssh/sshd_config files that configure root logins in a manner unintended by the vendor, which allows remote attackers to gain privileges via unspecified vectors.
Affected configurations
Node
sunsunosMatch5.10
sunsparc_enterprise_serverMatcht5120
ORsunsparc_enterprise_serverMatcht5220
Related
nvd
nvd
CVE-2008-1369
2008-03-18 17:44:00
cvelist
cvelist
CVE-2008-1369
2008-03-18 17:00:00
nessus
nessus
prion
prion
Design/Logic Flaw
2008-03-18 17:44:00
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
6.9 Medium
AI Score
Confidence
Low
0.011 Low
EPSS
Percentile
84.7%
Related for CVE-2008-1369