ByteOS Network

NVD Vulnerability Details :

CVE-2008-1369

Modified

Source-cve@mitre.org

Published At-18 Mar, 2008 | 17:44

Updated At-30 Oct, 2018 | 16:25

A certain incorrect Sun Solaris 10 image on SPARC Enterprise T5120 and T5220 servers has /etc/default/login and /etc/ssh/sshd_config files that configure root logins in a manner unintended by the vendor, which allows remote attackers to gain privileges via unspecified vectors.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	10.0	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:C

CPE Matches

Sun Microsystems (Oracle Corporation)

>>sunos>>5.10

cpe:2.3:o:sun:sunos:5.10:*:*:*:*:*:*:*

Sun Microsystems (Oracle Corporation)

>>sparc_enterprise_server>>t5120

cpe:2.3:h:sun:sparc_enterprise_server:t5120:*:*:*:*:*:*:*

Sun Microsystems (Oracle Corporation)

>>sparc_enterprise_server>>t5220

cpe:2.3:h:sun:sparc_enterprise_server:t5220:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-264	Primary	nvd@nist.gov
NVD-CWE-noinfo	Primary	nvd@nist.gov

Evaluator Description

Sun link will not execute.

References

Hyperlink	Source	Resource
http://secunia.com/advisories/29529	cve@mitre.org	N/A
http://sunsolve.sun.com/search/document.do?assetkey=1-66-231244-1	cve@mitre.org	N/A
http://www.securityfocus.com/bid/28469	cve@mitre.org	N/A
http://www.securitytracker.com/id?1019708	cve@mitre.org	N/A
http://www.vupen.com/english/advisories/2008/0810/references	cve@mitre.org	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/41332	cve@mitre.org	N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History