CVE-2005-0248: Sun Solaris

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

The Solaris Management Console (SMC) GUI for Solaris 8 and 9, when creating user accounts that are configured for password aging, creates the accounts with a blank password, which allows remote or local attackers to break into those accounts.

Affected products

• Sun Solaris: version 8.0 only; version 9.0 only
• Sun Sunos: version 5.8 only

Published 2005-05-02. Last modified 2026-06-16.