Lucene search

K
securityvulnsFULL-DISCLOSURESECURITYVULNS:VULN:7211
HistoryMar 01, 2007 - 12:00 a.m.

Sun Solaris unauthorized access

2007-03-0100:00:00
FULL-DISCLOSURE
vulners.com
21

EPSS

0.854

Percentile

98.6%

User's pasword is not checked in telnet session if F flag is set. On older versions defining TTYPROMPT variable allows unauthorized access with bin group privileges. Vulnerability is used by internet worm.