CVE Feed

    Dashboard / CVE / CVE-2001-0077

    CVE-2001-0077

    The clustmon service in Sun Cluster 2.x does not require authentication, which allows remote attackers to obtain sensitive information such as system logs and cluster configurations.

    Published:Feb 12, 2001
    Last Modified:Apr 16, 2026
    EPS:Sep 18, 2001
    EPSS Score:0.00799
    CVSS Score:5

    Affected Products

    Vendor
    Sun
    Product
    Cluster

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2003-1588 (CVSS 1.9) — Sun Cluster 2.2, when HA-Oracle or HA-Sybase DBMS services are used, stores database credentials in cleartext …
    CVE-2009-3433 (CVSS 7.2) — Unspecified vulnerability in clsetup in the configuration utility in Sun Solaris Cluster 3.2 allows local user…
    CVE-2008-2539 (CVSS 7.2) — The Sun Cluster Global File System in Sun Cluster 3.1 on Sun Solaris 8 through 10, when an underlying ufs file…
    CVE-2007-2267 (CVSS 6.8) — Unspecified vulnerability in Sun Cluster 3.1 and Solaris Cluster 3.2 before 20070424 allows remote authenticat…
    CVE-2006-1601 (CVSS 1.7) — Unspecified vulnerability in SunPlex Manager in Sun Cluster 3.1 4/04 allows local users with solaris.cluster.g…
    CVE-2003-1563 (CVSS 4) — Sun Cluster 2.2 through 3.2 for Oracle Parallel Server / Real Application Clusters (OPS/RAC) allows local user…
    CVE-2001-0078 (CVSS 2.1) — in.mond in Sun Cluster 2.x allows local users to read arbitrary files via a symlink attack on the status file …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High