Back to CVE Browser

CVE-2008-1369

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0640%

EPSS Percentile35.83th

PublishedMar 18, 2008

Last ModifiedApr 23, 2026

Vulnerability Description

A certain incorrect Sun Solaris 10 image on SPARC Enterprise T5120 and T5220 servers has /etc/default/login and /etc/ssh/sshd_config files that configure root logins in a manner unintended by the vendor, which allows remote attackers to gain privileges via unspecified vectors.

Affected Platforms (CPE)

💻

Sun

Sunos

= 5.10

References & Advisories

🔗 http://secunia.com/advisories/29529

🔗 http://sunsolve.sun.com/search/document.do?assetkey=1-66-231244-1

🔗 http://www.securityfocus.com/bid/28469

🔗 http://www.securitytracker.com/id?1019708

🔗 http://www.vupen.com/english/advisories/2008/0810/references

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/41332

🔗 http://secunia.com/advisories/29529

🔗 http://sunsolve.sun.com/search/document.do?assetkey=1-66-231244-1

Related Vulnerabilities

CVE-2007-088210.0

Argument injection vulnerability in the telnet daemon (in.telnetd) in Solaris 10 and 11 (SunOS 5.10 and 5.11) misinterprets certai...

CVE-1999-158410.0

Unknown vulnerability in (1) loadmodule, and (2) modload if modload is installed with setuid/setgid privileges, in SunOS 4.1.1 thr...

CVE-1999-146710.0

Vulnerability in rcp on SunOS 4.0.x allows remote attackers from trusted hosts to execute arbitrary commands as root, possibly rel...

CVE-1999-03209.3

SunOS rpc.cmsd allows attackers to obtain root access by overwriting arbitrary files.