low2.1Public exploit code
CVE-2003-1071
rpc.walld (wall daemon) for Solaris 2.6 through 9 allows local users to send messages to logged on users that appear to come from arbitrary user IDs by closing…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Sun Solaris 2.5.1/2.6/7.0/8/9 Wall - Spoofed Message Origin2003-01-03 · local · solaris · Verified
Impact
rpc.walld (wall daemon) for Solaris 2.6 through 9 allows local users to send messages to logged on users that appear to come from arbitrary user IDs by closing stderr before executing wall, then supplying a spoofed from header.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sun | Solaris | Versions 2.5.1, 2.6, 7.0, 8.0, 9.0 |
| Sun | Sunos | All versions Versions 5.5.1, 5.7, 5.8 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/7825/
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-51980-1
- http://www.kb.cert.org/vuls/id/944241
- http://www.securityfocus.com/archive/1/305105
- http://www.securityfocus.com/bid/6509
- http://www.securitytracker.com/id?1005882
- http://www.securitytracker.com/id?1006682
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11608
- http://secunia.com/advisories/7825/
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-51980-1
- http://www.kb.cert.org/vuls/id/944241
- http://www.securityfocus.com/archive/1/305105
- http://www.securityfocus.com/bid/6509
- http://www.securitytracker.com/id?1005882
- http://www.securitytracker.com/id?1006682
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11608