CVE-2001-0077

The clustmon service in Sun Cluster 2.x does not require authentication, which allows remote attackers to obtain sensitive information such as system logs and cluster configurations...

CVE-2001-0077

The clustmon service in Sun Cluster 2.x does not require authentication, which allows remote attackers to obtain sensitive information such as system logs and cluster configurations...

Two Holes in Sun Cluster 2.x

Hole 1 ------- Summary ------- Sun Cluster 2.x Sun Microsystems' commercial high-availability product for Solaris leaks potentially sensitive information to local or remote users. Specifics --------- In a standard Sun Cluster install, there is a service called clustmon that runs on port 12000. It...