Vulnerability in Sun Solaris
CVE-2005-0248
The Solaris Management Console (SMC) GUI for Solaris 8 and 9, when creating user accounts that are configured for password aging, creates the accounts with a blank password, which allows remote or local attackers to break into those accounts.
EPSS: 0.014 (69.5th percentile) — read the EPSS interpretation.
Affected products
- Sun Solaris — versions 8.0, 9.0
- Sun Sunos — versions 5.8
- N/a — versions n/a
References
- cve@mitre.org (Patch, vdb-entry, x_refsource_BID)
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (vendor-advisory, Patch, x_refsource_SUNALERT)
- cve@mitre.org (government-resource, Vendor Advisory, x_refsource_CIAC, third-party-advisory)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (Patch, x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)