ISS X-Force reports a static buffer overflow vulnerability is present in the Sun Solaris implementation of "login", otherwise known as "/bin/login" for its location in the file system.
"There is no simple workaround for this issue. However, disabling all default terminal communications services and installing SSH will eliminate the vulnerability."
Official patches will be available at the following location: http://sunsolve.sun.com/securitypatch