Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

Oracle OpenSolaris lets attackers misuse domain-join tool

CVE-2010-0558 · published 16 years ago
Summary

Oracle OpenSolaris is shipped with a default setting that lets anyone run the smbadm command to connect the server to a Windows Active Directory network. An attacker who can exploit this could cause unknown problems on the system. To protect yourself, change the default setting, restrict who can use the command, and apply any available patches or configuration guidance from Oracle.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
sun opensolaris snv_77
snv_78
snv_79
snv_80
snv_81
snv_82
snv_83
snv_84
snv_85
snv_86
snv_87
snv_88
43 more version ranges
cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*
Original advisory text
The default configuration of Oracle OpenSolaris snv_77 through snv_131 allows attackers to have an unspecified impact via vectors related to using smbadm to join a Windows Active Directory domain.
The default configuration of Oracle OpenSolaris snv_77 through snv_131 allows attackers to have an unspecified impact via vectors related to using smbadm to join a Windows Active Directory domain.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
7.5 High
Exploitation
1% chance of attack within 30 days
Type
CWE-16Configuration
Timeline
Published5 Feb 2010
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2010-0558 · NVD
Track software like this
Free during beta