Security Issues

The following security issues applies to the Solaris 10 release.

Nonpassword Logins Fail With pam_ldap Enabled (6365896)

After the account management PAM module for LDAP (pam_ldap) is enabled, users must have passwords to log in to the system. Consequently, nonpassword-based logins fail, including those logins that use the following tools:

• Remote shell (rsh)

• Remote login (rlogin)

• Secure shell (ssh)

Workaround: None.

Incorrect Parameters Might Cause Panic in Sun StorEdge T3 (4319812)

A Sun StorEdge^TM T3 system might panic if an application uses the HTTP interface to send tokens with out-of-range parameters.