Unscored severity · published Dec 11, 2008
CVE-2008-5422
Sun Sun Ray Server Software 3.1 through 4.0 does not properly restrict access, which allows remote attackers to discover the Sun Ray administration password, and obtain admin…
–
CVSS
2.6%
EPSS
No
On KEV
Description
Sun Sun Ray Server Software 3.1 through 4.0 does not properly restrict access, which allows remote attackers to discover the Sun Ray administration password, and obtain admin access to the Data Store and Administration GUI, via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.6% · higher than 85% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RS
Ray Server Software · Sun
3.0; 3.1; 4.0; 3.1; 4.0; 3.1.1; +3 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-5422
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-5422
secunia.com
http://secunia.com/advisories/33108
Patch
http://sunsolve.sun.com/search/document.do?assetkey=1-21-127553-04-1
Patch
http://sunsolve.sun.com/search/document.do?assetkey=1-26-240365-1
support.avaya.com
http://support.avaya.com/elmodocs2/security/ASA-2008-502.htm
Patch
http://www.securityfocus.com/bid/32769
www.securitytracker.com
http://www.securitytracker.com/id?1021383
More from Ray Server Software
–
CVE-2009-4314
Sun Ray Server Software 4.1 on Solaris 10, when Automatic Multi-Group Hotdesking (AMGH) is enabled, responds to a logout action by immediately logging the user in again, which…
–
CVE-2009-4295
Sun Ray Server Software 4.0 and 4.1 does not generate a unique DSA private key for the firmware on each Sun Ray 1, 1g, 100, and 150 DTU device, which makes it easier for remote…
–
CVE-2009-4294
Unspecified vulnerability in the Authentication Manager (aka utauthd) in Sun Ray Server Software 4.0 and 4.1 allows remote attackers to execute arbitrary code or cause a denial of…
–
CVE-2009-2491
The utaudiod daemon in Sun Ray Server Software (SRSS) 4.0, when Solaris Trusted Extensions is enabled, allows local users to access the sessions of arbitrary users via unknown…
–
CVE-2009-2490
Unspecified vulnerability in the utaudiod daemon in Sun Ray Server Software (SRSS) 4.0, when Solaris Trusted Extensions is enabled, allows local users to cause a denial of service…