oval:org.mitre.oval:def:1273

Definition Id: oval:org.mitre.oval:def:1273

Oval ID:	oval:org.mitre.oval:def:1273
Title:	Solaris SAdmin Client Credentials Remote Administrative Access Vulnerability
Description:	The default installation of sadmind on Solaris uses weak authentication (AUTH_SYS), which allows local and remote attackers to spoof Solstice AdminSuite clients and gain root privileges via a certain sequence of RPC packets.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2003-0722	Version:	5
Platform(s):	Sun Solaris 7 Sun Solaris 8 Sun Solaris 9	Product(s):	Sadmin
Definition Synopsis:
Software section Solaris 7,8,or 9 installed Solaris 8 Installed AND Solaris 7 Installed AND Solaris 9 Installed AND System and Network Administration Framework Installed AND NOT Patch 116457-02 or later installed AND NOT Patch 116442-01 or later installed AND NOT Patch 116454-01 or later installed AND Configuration section inetd running AND inetd.conf contains sadmind AND NOT Sadmin called using strong authentication