Unscored severity · published May 8, 2008
CVE-2008-2112
Unspecified vulnerability in Sun Ray Kiosk Mode 4.0 allows local and remote authenticated Sun Ray administrators to gain root privileges via unknown vectors related to utconfig
–
CVSS
2.5%
EPSS
No
On KEV
Description
Unspecified vulnerability in Sun Ray Kiosk Mode 4.0 allows local and remote authenticated Sun Ray administrators to gain root privileges via unknown vectors related to utconfig.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.5% · higher than 85% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RS
Ray Server Software · Sun
4.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-2112
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-2112
Vendor Advisory
http://secunia.com/advisories/30130
sunsolve.sun.com
http://sunsolve.sun.com/search/document.do?assetkey=1-26-236944-1
www.securityfocus.com
http://www.securityfocus.com/bid/29092
www.securitytracker.com
http://www.securitytracker.com/id?1019993
www.vupen.com
http://www.vupen.com/english/advisories/2008/1454/references
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/42262
More from Ray Server Software
–
CVE-2009-4314
Sun Ray Server Software 4.1 on Solaris 10, when Automatic Multi-Group Hotdesking (AMGH) is enabled, responds to a logout action by immediately logging the user in again, which…
–
CVE-2009-4295
Sun Ray Server Software 4.0 and 4.1 does not generate a unique DSA private key for the firmware on each Sun Ray 1, 1g, 100, and 150 DTU device, which makes it easier for remote…
–
CVE-2009-4294
Unspecified vulnerability in the Authentication Manager (aka utauthd) in Sun Ray Server Software 4.0 and 4.1 allows remote attackers to execute arbitrary code or cause a denial of…
–
CVE-2009-2491
The utaudiod daemon in Sun Ray Server Software (SRSS) 4.0, when Solaris Trusted Extensions is enabled, allows local users to access the sessions of arbitrary users via unknown…
–
CVE-2009-2490
Unspecified vulnerability in the utaudiod daemon in Sun Ray Server Software (SRSS) 4.0, when Solaris Trusted Extensions is enabled, allows local users to cause a denial of service…