Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

Oracle OpenSolaris default setup can be abused when joining AD

CVE-2010-0559 · published 16 years ago
Summary

The standard configuration of Oracle OpenSolaris versions snv_91 through snv_131 allows someone using the kclient tool to connect to a Windows Active Directory domain to cause an uncertain effect. This could let an attacker interfere with domain‑joining operations or gain unauthorized access. Review and tighten the kclient settings, limit domain‑join capabilities, and apply any available updates from Oracle.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
sun opensolaris snv_91
snv_92
snv_93
snv_94
snv_95
snv_96
snv_97
snv_98
snv_99
snv_100
snv_101
snv_102
29 more version ranges
cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*
Original advisory text
The default configuration of Oracle OpenSolaris snv_91 through snv_131 allows attackers to have an unspecified impact via vectors related to using kclient to join a Windows Active Directory domain.
The default configuration of Oracle OpenSolaris snv_91 through snv_131 allows attackers to have an unspecified impact via vectors related to using kclient to join a Windows Active Directory domain.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
7.5 High
Exploitation
1% chance of attack within 30 days
Type
CWE-16Configuration
Timeline
Published5 Feb 2010
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2010-0559 · NVD
Track software like this
Free during beta