Sun Ray Server认证管理器远程命令执行漏洞

BUGTRAQ ID: 37284 Sun Ray Server软件可为客户提供安全、低成本、几乎无需管理的桌面环境。 Sun Ray Server Software的实现上存在漏洞，远程攻击者可能利用此漏洞以系统用户的权限执行任意命令，获取对系统的控制。 Sun Ray Server Software 4.1 Sun Ray Server Software 4.0 厂商补丁： Sun --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： Sun Ray Server Software 4.0 Sun 127553-07...

CVE-2009-4295

Sun Ray Server Software 4.0 and 4.1 does not generate a unique DSA private key for the firmware on each Sun Ray 1, 1g, 100, and 150 DTU device, which makes it easier for remote attackers to obtain sensitive information by predicting a key and then using it to decrypt sniffed network traffic...

Design/Logic Flaw

Unspecified vulnerability in the Authentication Manager aka utauthd in Sun Ray Server Software 4.0 and 4.1 allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors...

CVE-2009-4294

Unspecified vulnerability in the Authentication Manager aka utauthd in Sun Ray Server Software 4.0 and 4.1 allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors...

Design/Logic Flaw

Sun Ray Server Software 4.0 and 4.1 does not generate a unique DSA private key for the firmware on each Sun Ray 1, 1g, 100, and 150 DTU device, which makes it easier for remote attackers to obtain sensitive information by predicting a key and then using it to decrypt sniffed network traffic...

CVE-2009-4294

CVE-2009-4294 affects Sun Ray Server Software 4.0 and 4.1, via the Authentication Manager (utauthd). The linked sources describe an unspecified vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service through unknown vectors. The NVD entry rates this as hi...

CVE-2009-4295

Sun Ray Server Software 4.0/4.1 on Sun Ray 1, 1g, 100, and 150 DTU devices does not generate a unique DSA private key for firmware, which can allow remote attackers to predict a key and decrypt sniffed network traffic. The CVE entry documents this vulnerability and its impact as described by mult...

CVE-2009-4295

Sun Ray Server Software 4.0 and 4.1 does not generate a unique DSA private key for the firmware on each Sun Ray 1, 1g, 100, and 150 DTU device, which makes it easier for remote attackers to obtain sensitive information by predicting a key and then using it to decrypt sniffed network traffic...

CVE-2009-2489

Unspecified vulnerability in the utdmsession program in Sun Ray Server Software SRSS 4.0 allows local users to access the sessions of arbitrary users via unknown vectors...

Code injection

Unspecified vulnerability in the utaudiod daemon in Sun Ray Server Software SRSS 4.0, when Solaris Trusted Extensions is enabled, allows local users to cause a denial of service audio outage or possibly gain privileges via unknown vectors related to "resource leaks."...

Design/Logic Flaw

The utaudiod daemon in Sun Ray Server Software SRSS 4.0, when Solaris Trusted Extensions is enabled, allows local users to access the sessions of arbitrary users via unknown vectors related to "resource leaks."...

CVE-2009-2490

Unspecified vulnerability in the utaudiod daemon in Sun Ray Server Software SRSS 4.0, when Solaris Trusted Extensions is enabled, allows local users to cause a denial of service audio outage or possibly gain privileges via unknown vectors related to "resource leaks."...

Design/Logic Flaw

Unspecified vulnerability in the utdmsession program in Sun Ray Server Software SRSS 4.0 allows local users to access the sessions of arbitrary users via unknown vectors...

CVE-2009-2490

Unspecified vulnerability in the utaudiod daemon in Sun Ray Server Software SRSS 4.0, when Solaris Trusted Extensions is enabled, allows local users to cause a denial of service audio outage or possibly gain privileges via unknown vectors related to "resource leaks."...

CVE-2009-2489

Unspecified vulnerability in the utdmsession program in Sun Ray Server Software SRSS 4.0 allows local users to access the sessions of arbitrary users via unknown vectors...

CVE-2009-2491

The utaudiod daemon in Sun Ray Server Software SRSS 4.0, when Solaris Trusted Extensions is enabled, allows local users to access the sessions of arbitrary users via unknown vectors related to "resource leaks."...

CVE-2009-2489

Technical details for CVE-2009-2489 are not publicly provided in the connected documents. The references describe an unspecified local-access vulnerability in Sun Ray Server Software 4.0 but do not specify affected versions, exploitation vectors, or fixes. Monitor for updates.

CVE-2009-2490

CVE-2009-2490 affects Sun Ray Server Software (SRSS) 4.0, specifically the utaudiod daemon when Solaris Trusted Extensions is enabled. The issue allows local users to cause a denial of service (audio outage) and potentially gain privileges due to resource leaks. The provided description does not ...

Gentoo Security Advisory GLSA 200812-15 (povray)

The remote host is missing updates announced in advisory GLSA 200812-15. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Solaris 10 (x86) : 127557-05 (deprecated)

Sun Ray Connector for Microsoft Windows Operating Systems version. Date this patch was last updated by Sun : Dec/07/09 This plugin has been deprecated and either replaced with individual 127557 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security,...