Design/Logic Flaw

2009-12-1116:30:00

PRIOn knowledge base

www.prio-n.com

6.8 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

50.4%

JSON

Sun Ray Server Software 4.0 and 4.1 does not generate a unique DSA private key for the firmware on each Sun Ray 1, 1g, 100, and 150 DTU device, which makes it easier for remote attackers to obtain sensitive information by predicting a key and then using it to decrypt sniffed network traffic.

CPENameOperatorVersion
ray_server_softwareeq4.1 sparc
ray_server_softwareeq4.0 x86
ray_server_softwareeq4.0 sparc
ray_server_softwareeq4.1 linux
ray_server_softwareeq4.1 x86
ray_server_softwareeq4.0 linux

Name	Operator	Version
ray_server_software	eq	4.1 sparc
ray_server_software	eq	4.0 x86
ray_server_software	eq	4.0 sparc
ray_server_software	eq	4.1 linux
ray_server_software	eq	4.1 x86
ray_server_software	eq	4.0 linux