Vulnerabilities > CVE-2003-1071 - Unspecified vulnerability in SUN Solaris and Sunos

047910
CVSS 2.1 - LOW
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
NONE
local
low complexity
sun
exploit available

Summary

rpc.walld (wall daemon) for Solaris 2.6 through 9 allows local users to send messages to logged on users that appear to come from arbitrary user IDs by closing stderr before executing wall, then supplying a spoofed from header.

Exploit-Db

descriptionSun Solaris 2.5.1/2.6/7.0/8/9 Wall Spoofed Message Origin Vulnerability. CVE-2003-1071. Local exploit for solaris platform
idEDB-ID:22120
last seen2016-02-02
modified2003-01-03
published2003-01-03
reporterBrant Roman
sourcehttps://www.exploit-db.com/download/22120/
titleSun Solaris 2.5.1/2.6/7.0/8/9 Wall Spoofed Message Origin Vulnerability