The rpc.cmsd service in Sun Solaris 10 contains an integer overflow which can allow a malicious unauthenticated user to cause a denial of service, or remotely execute arbitrary code with root privileges.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/94728/DDIVRT-2009-28.txt
Source: https://packetstormsecurity.com/files/94728/Digital-Defense-VRT-Advisory-2009.28.html