The rpc.cmsd service in Sun Solaris 10 contains an integer overflow which can allow a malicious unauthenticated user to cause a denial of service, or remotely execute arbitrary code with root privileges.
622cc110f27da012a3cf2c4780330c34468c01f67a11e64e133fa84a0d12ba60