Description
A certain incorrect Sun Solaris 10 image on SPARC Enterprise T5120 and T5220 servers has /etc/default/login and /etc/ssh/sshd_config files that configure root logins in a manner unintended by the vendor, which allows remote attackers to gain privileges via unspecified vectors.
References
- ADV-2008-0810 vdb-entry
- sparc-configuration-privilege-escalation(41332) vdb-entry
- 29529 third-party-advisory
- 231244 vendor-advisory
- 1019708 vdb-entry
- 28469 vdb-entry