Unscored severity · published Dec 11, 2008
CVE-2008-5423
Sun Sun Ray Server Software 3.x and 4.0 and Sun Ray Windows Connector 1.1 and 2.0 expose the LDAP password during a configuration step, which allows local users to discover the…
–
CVSS
0.3%
EPSS
No
On KEV
Description
Sun Sun Ray Server Software 3.x and 4.0 and Sun Ray Windows Connector 1.1 and 2.0 expose the LDAP password during a configuration step, which allows local users to discover the Sun Ray administration password, and obtain admin access to the Data Store and Administration GUI, via unspecified vectors related to the utconfig component of the Server Software and the uttscadm component of the Windows Connector.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 24% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RS
Ray Server Software · Sun
3.0; 3.1; 4.0; 3.1; 4.0; 3.1; +9 more · source: NVD
RW
Ray Windows Connector · Sun
1.1; 2.0; 1.1; 2.0; 1.1; 2.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-5423
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-5423
secunia.com
http://secunia.com/advisories/33108
secunia.com
http://secunia.com/advisories/33119
securitytracker.com
http://securitytracker.com/id?1021379
Patch
http://sunsolve.sun.com/search/document.do?assetkey=1-21-127553-04-1
Patch
http://sunsolve.sun.com/search/document.do?assetkey=1-21-127556-03-1
Patch
http://sunsolve.sun.com/search/document.do?assetkey=1-26-240506-1
More from Ray Server Software
–
CVE-2009-4314
Sun Ray Server Software 4.1 on Solaris 10, when Automatic Multi-Group Hotdesking (AMGH) is enabled, responds to a logout action by immediately logging the user in again, which…
–
CVE-2009-4295
Sun Ray Server Software 4.0 and 4.1 does not generate a unique DSA private key for the firmware on each Sun Ray 1, 1g, 100, and 150 DTU device, which makes it easier for remote…
–
CVE-2009-4294
Unspecified vulnerability in the Authentication Manager (aka utauthd) in Sun Ray Server Software 4.0 and 4.1 allows remote attackers to execute arbitrary code or cause a denial of…
–
CVE-2009-2491
The utaudiod daemon in Sun Ray Server Software (SRSS) 4.0, when Solaris Trusted Extensions is enabled, allows local users to access the sessions of arbitrary users via unknown…
–
CVE-2009-2490
Unspecified vulnerability in the utaudiod daemon in Sun Ray Server Software (SRSS) 4.0, when Solaris Trusted Extensions is enabled, allows local users to cause a denial of service…