Description
The clustmon service in Sun Cluster 2.x does not require authentication, which allows remote attackers to obtain sensitive information such as system logs and cluster configurations.
References
- 20001212 Two Holes in Sun Cluster 2.x mailing-list
- clustmon-no-authentication(6123) vdb-entry