Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.2

Enterprise Storage Manager lets local users become root

CVE-2004-1345 · published 22 years ago
Summary

The Enterprise Storage Manager 2.1 program for Solaris 8 and 9 lets anyone who has been given the “ESMUser” role obtain full administrator privileges on the server. This means a low‑level user could take complete control of the storage system and the underlying operating system. Install the latest update from Sun or remove the ESMUser role until a patch is applied.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
sun storedge_3310_scsi_array All versions
cpe:2.3:h:sun:storedge_3310_scsi_array:*:*:*:*:*:*:*:*
sun storedge_3510_fc_array All versions
cpe:2.3:h:sun:storedge_3510_fc_array:*:*:*:*:*:*:*:*
sun enterprise_storage_manager 2.1
cpe:2.3:a:sun:enterprise_storage_manager:2.1:*:*:*:*:*:*:*
Original advisory text
Unknown vulnerability in Sun StorEdge Enterprise Storage Manager (ESM) 2.1 for Solaris 8 and Solaris 9 allows local users with the "ESMUser" role to gain root access.
Unknown vulnerability in Sun StorEdge Enterprise Storage Manager (ESM) 2.1 for Solaris 8 and Solaris 9 allows local users with the "ESMUser" role to gain root access.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker full control (estimated)
Severity
7.2 High
Exploitation
<1% chance of attack within 30 days
Timeline
Published21 Jun 2004
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2004-1345 · NVD
Track software like this
Free during beta