The remote RPC service 100249 (snmpXdmid) is vulnerable to a heap overflow which allows any user to obtain a root shell on this host.

disable this service (/etc/init.d/init.dmi stop) if you don't use it, or contact Sun for a patch