CVE-2008-5423
6.2 Medium
AI Score
Confidence
Low
4.3 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:S/C:P/I:P/A:P
0.0004 Low
EPSS
Percentile
12.9%
Sun Sun Ray Server Software 3.x and 4.0 and Sun Ray Windows Connector 1.1 and 2.0 expose the LDAP password during a configuration step, which allows local users to discover the Sun Ray administration password, and obtain admin access to the Data Store and Administration GUI, via unspecified vectors related to the utconfig component of the Server Software and the uttscadm component of the Windows Connector.
References
secunia.com/advisories/33108
secunia.com/advisories/33119
securitytracker.com/id?1021379
sunsolve.sun.com/search/document.do?assetkey=1-21-127553-04-1
sunsolve.sun.com/search/document.do?assetkey=1-21-127556-03-1
sunsolve.sun.com/search/document.do?assetkey=1-26-240506-1
support.avaya.com/elmodocs2/security/ASA-2008-500.htm
www.securityfocus.com/bid/32772
www.vupen.com/english/advisories/2008/3406
www.vupen.com/english/advisories/2008/3407
exchange.xforce.ibmcloud.com/vulnerabilities/47258
Related
6.2 Medium
AI Score
Confidence
Low
4.3 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:S/C:P/I:P/A:P
0.0004 Low
EPSS
Percentile
12.9%