Sun Solaris in.rwhod Code Execution (CVE-2004-1351)

Sun Microsystems provides a service called in.rwhod in the Solaris operating system line of products. The service is responsible for maintaining a database to be used by the "rwho" and "ruptime" processes by exchanging status information with other similar services running on other hosts on the...

CVE-2004-1351

The CVE-2004-1351 entry relates to Sun Solaris in.rwhod (the rwho daemon). A vulnerability exists in the in.rwhod component that can be exploited remotely to inject and execute arbitrary code, potentially compromising the host with root privileges. The accompanying advisory (CPAI-2004-207) explai...