SunOS 5.6 was found to be vulnerable when Solstice Enterprise Agent is installed on it. The vulnerability allows malicious users to execute arbitrary commands with root privileges, manipulate system parameters and kill processes.
The vulnerability is present in the SNMP daemon shipped with SunOS 5.6 on a Solaris 2.6. Because the SNMP daemon is configured to work by default, a lot of system are affected. The vulnerability is present in a hidden and undocumented common string in the SNMP agent, this string allows a malicious user to to kill any process, update routes, disable firewalls (by changing network routes), and disable network interfaces.
