Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2003-1071

rpc.walld (wall daemon) for Solaris 2.6 through 9 allows local users to send messages to logged on users that appear to come from arbitrary user IDs by closing stderr before executing wall, then supplying a spoofed from header.

Published

2003-01-03T05:00:00.000

Last Modified

2025-04-03T01:03:51.193

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 2.1 (LOW)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:N/I:P/A:N

Access Vector: LOCAL
Access Complexity: LOW
Authentication: NONE
Confidentiality Impact: NONE
Integrity Impact: PARTIAL
Availability Impact: NONE

Exploitability Score

3.9

Impact Score

2.9

Weaknesses

Type: Primary
NVD-CWE-Other

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Operating System	sun	solaris	2.5.1	Yes
Operating System	sun	solaris	2.6	Yes
Operating System	sun	solaris	7.0	Yes
Operating System	sun	solaris	8.0	Yes
Operating System	sun	solaris	9.0	Yes
Operating System	sun	sunos	-	Yes
Operating System	sun	sunos	5.5.1	Yes
Operating System	sun	sunos	5.7	Yes
Operating System	sun	sunos	5.8	Yes

References

http://secunia.com/advisories/7825/ Vendor Advisory ([email protected])
http://sunsolve.sun.com/search/document.do?assetkey=1-26-51980-1 Patch, Vendor Advisory ([email protected])
http://www.kb.cert.org/vuls/id/944241 Exploit, Third Party Advisory, US Government Resource ([email protected])
http://www.securityfocus.com/archive/1/305105 Exploit, Vendor Advisory ([email protected])
http://www.securityfocus.com/bid/6509 ([email protected])
http://www.securitytracker.com/id?1005882 ([email protected])
http://www.securitytracker.com/id?1006682 ([email protected])
https://exchange.xforce.ibmcloud.com/vulnerabilities/11608 ([email protected])
http://secunia.com/advisories/7825/ Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://sunsolve.sun.com/search/document.do?assetkey=1-26-51980-1 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.kb.cert.org/vuls/id/944241 Exploit, Third Party Advisory, US Government Resource (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/archive/1/305105 Exploit, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/6509 (af854a3a-2127-422b-91ae-364da2661108)
http://www.securitytracker.com/id?1005882 (af854a3a-2127-422b-91ae-364da2661108)
http://www.securitytracker.com/id?1006682 (af854a3a-2127-422b-91ae-364da2661108)
https://exchange.xforce.ibmcloud.com/vulnerabilities/11608 (af854a3a-2127-422b-91ae-364da2661108)