CVE-2009-2489

Unspecified vulnerability in the utdmsession program in Sun Ray Server Software SRSS 4.0 allows local users to access the sessions of arbitrary users via unknown vectors...

CVE-2009-2490

CVE-2009-2490 affects Sun Ray Server Software (SRSS) 4.0, specifically the utaudiod daemon when Solaris Trusted Extensions is enabled. The issue allows local users to cause a denial of service (audio outage) and potentially gain privileges due to resource leaks. The provided description does not ...

CVE-2009-2489

Technical details for CVE-2009-2489 are not publicly provided in the connected documents. The references describe an unspecified local-access vulnerability in Sun Ray Server Software 4.0 but do not specify affected versions, exploitation vectors, or fixes. Monitor for updates.

CVE-2009-2490

Unspecified vulnerability in the utaudiod daemon in Sun Ray Server Software SRSS 4.0, when Solaris Trusted Extensions is enabled, allows local users to cause a denial of service audio outage or possibly gain privileges via unknown vectors related to "resource leaks."...

CVE-2009-2489: Undefined Security Weakness

Unspecified vulnerability in the utdmsession program in Sun Ray Server Software SRSS 4.0 allows local users to access the sessions of arbitrary users via unknown vectors...

CVE-2009-2491: Undefined Security Weakness

The utaudiod daemon in Sun Ray Server Software SRSS 4.0, when Solaris Trusted Extensions is enabled, allows local users to access the sessions of arbitrary users via unknown vectors related to "resource leaks."...

CVE-2009-2490: Undefined Security Weakness

Unspecified vulnerability in the utaudiod daemon in Sun Ray Server Software SRSS 4.0, when Solaris Trusted Extensions is enabled, allows local users to cause a denial of service audio outage or possibly gain privileges via unknown vectors related to "resource leaks."...

Solaris 10 (sparc) : 127553-08 (deprecated)

Sun Ray Core Services version 4.0 Patch Update. Date this patch was last updated by Sun : Feb/24/10 This plugin has been deprecated and either replaced with individual 127553 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@...

Solaris 10 (x86) : 124848-04 (deprecated)

Sun Ray Connector for Microsoft Windows Operating Systems 1.1, Pat. Date this patch was last updated by Sun : Nov/26/08 This plugin has been deprecated and either replaced with individual 124848 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security...

Solaris 10 (x86) : 127557-05 (deprecated)

Sun Ray Connector for Microsoft Windows Operating Systems version. Date this patch was last updated by Sun : Dec/07/09 This plugin has been deprecated and either replaced with individual 127557 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security,...

Solaris 10 (sparc) : 124847-04 (deprecated)

Sun Ray Connector for Microsoft Windows Operating Systems version. Date this patch was last updated by Sun : Nov/26/08 This plugin has been deprecated and either replaced with individual 124847 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security,...

CVE-2008-5422

Sun Sun Ray Server Software 3.1 through 4.0 does not properly restrict access, which allows remote attackers to discover the Sun Ray administration password, and obtain admin access to the Data Store and Administration GUI, via unspecified vectors...

Default credentials

Sun Sun Ray Server Software 3.x and 4.0 and Sun Ray Windows Connector 1.1 and 2.0 expose the LDAP password during a configuration step, which allows local users to discover the Sun Ray administration password, and obtain admin access to the Data Store and Administration GUI, via unspecified vecto...

Design/Logic Flaw

Sun Sun Ray Server Software 3.1 through 4.0 does not properly restrict access, which allows remote attackers to discover the Sun Ray administration password, and obtain admin access to the Data Store and Administration GUI, via unspecified vectors...

CVE-2008-5423

Sun Sun Ray Server Software 3.x and 4.0 and Sun Ray Windows Connector 1.1 and 2.0 expose the LDAP password during a configuration step, which allows local users to discover the Sun Ray administration password, and obtain admin access to the Data Store and Administration GUI, via unspecified vecto...

CVE-2008-5423

Sun Sun Ray Server Software (3.x/4.0) and Sun Ray Windows Connector (1.1/2.0) expose the LDAP password during a configuration step, enabling local users to discover the Sun Ray administrator password and obtain admin access to the Data Store and Administration GUI via the utconfig (Server Softwar...

CVE-2008-5423

Sun Sun Ray Server Software 3.x and 4.0 and Sun Ray Windows Connector 1.1 and 2.0 expose the LDAP password during a configuration step, which allows local users to discover the Sun Ray administration password, and obtain admin access to the Data Store and Administration GUI, via unspecified vecto...

CVE-2008-5422

Sun Sun Ray Server Software 3.1 through 4.0 does not properly restrict access, which allows remote attackers to discover the Sun Ray administration password, and obtain admin access to the Data Store and Administration GUI, via unspecified vectors...

CVE-2008-5422

CVE-2008-5422 concerns Sun Sun Ray Server Software 3.1–4.0, where access is not properly restricted, enabling remote attackers to discover the Sun Ray administrator password and gain admin access to the Data Store and Administration GUI via unspecified vectors. Affected products include Sun Ray C...

CVE-2008-5423: Exposure of Sensitive Information to an Unauthorized Actor

Sun Sun Ray Server Software 3.x and 4.0 and Sun Ray Windows Connector 1.1 and 2.0 expose the LDAP password during a configuration step, which allows local users to discover the Sun Ray administration password, and obtain admin access to the Data Store and Administration GUI, via unspecified vecto...