51 matches found
Sun Update with 16 Fixes Coming Next Week
Oracle has moved Solaris onto its quarterly security patch schedule, meaning users of the Sun Microsystems operating system will now know months in advance when they will be getting security updates. The next Critical Patch Update is due on Tuesday. The update will include 16 security fixes for S...
Design/Logic Flaw
Sun Ray Server Software 4.1 on Solaris 10, when Automatic Multi-Group Hotdesking AMGH is enabled, responds to a logout action by immediately logging the user in again, which makes it easier for physically proximate attackers to obtain access to a session by going to an unattended DTU device...
CVE-2009-4314
CVE-2009-4314 affects Sun Ray Server Software 4.1 on Solaris 10. When Automatic Multi-Group Hotdesking (AMGH) is enabled, a logout action results in the user being immediately logged back in, enabling physical access by someone at an unattended DTU device to gain a session. Root cause is the logo...
Design/Logic Flaw
Unspecified vulnerability in the Authentication Manager aka utauthd in Sun Ray Server Software 4.0 and 4.1 allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors...
Design/Logic Flaw
Sun Ray Server Software 4.0 and 4.1 does not generate a unique DSA private key for the firmware on each Sun Ray 1, 1g, 100, and 150 DTU device, which makes it easier for remote attackers to obtain sensitive information by predicting a key and then using it to decrypt sniffed network traffic...
CVE-2009-4294
Unspecified vulnerability in the Authentication Manager aka utauthd in Sun Ray Server Software 4.0 and 4.1 allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors...
CVE-2009-4294
CVE-2009-4294 affects Sun Ray Server Software 4.0 and 4.1, via the Authentication Manager (utauthd). The linked sources describe an unspecified vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service through unknown vectors. The NVD entry rates this as hi...
CVE-2009-4295
Sun Ray Server Software 4.0/4.1 on Sun Ray 1, 1g, 100, and 150 DTU devices does not generate a unique DSA private key for firmware, which can allow remote attackers to predict a key and decrypt sniffed network traffic. The CVE entry documents this vulnerability and its impact as described by mult...
Design/Logic Flaw
Unspecified vulnerability in the utdmsession program in Sun Ray Server Software SRSS 4.0 allows local users to access the sessions of arbitrary users via unknown vectors...
CVE-2009-2490
Unspecified vulnerability in the utaudiod daemon in Sun Ray Server Software SRSS 4.0, when Solaris Trusted Extensions is enabled, allows local users to cause a denial of service audio outage or possibly gain privileges via unknown vectors related to "resource leaks."...
Design/Logic Flaw
The utaudiod daemon in Sun Ray Server Software SRSS 4.0, when Solaris Trusted Extensions is enabled, allows local users to access the sessions of arbitrary users via unknown vectors related to "resource leaks."...
CVE-2009-2489
Technical details for CVE-2009-2489 are not publicly provided in the connected documents. The references describe an unspecified local-access vulnerability in Sun Ray Server Software 4.0 but do not specify affected versions, exploitation vectors, or fixes. Monitor for updates.
CVE-2009-2490
CVE-2009-2490 affects Sun Ray Server Software (SRSS) 4.0, specifically the utaudiod daemon when Solaris Trusted Extensions is enabled. The issue allows local users to cause a denial of service (audio outage) and potentially gain privileges due to resource leaks. The provided description does not ...
Default credentials
Sun Sun Ray Server Software 3.x and 4.0 and Sun Ray Windows Connector 1.1 and 2.0 expose the LDAP password during a configuration step, which allows local users to discover the Sun Ray administration password, and obtain admin access to the Data Store and Administration GUI, via unspecified vecto...
CVE-2008-5423
Sun Sun Ray Server Software 3.x and 4.0 and Sun Ray Windows Connector 1.1 and 2.0 expose the LDAP password during a configuration step, which allows local users to discover the Sun Ray administration password, and obtain admin access to the Data Store and Administration GUI, via unspecified vecto...
CVE-2008-5423
Sun Sun Ray Server Software (3.x/4.0) and Sun Ray Windows Connector (1.1/2.0) expose the LDAP password during a configuration step, enabling local users to discover the Sun Ray administrator password and obtain admin access to the Data Store and Administration GUI via the utconfig (Server Softwar...
CVE-2007-6481
Unspecified vulnerability in the Device Manager daemon utdevmgrd in Sun Ray Server Software 2.0, 3.0, 3.1, and 3.1.1 allows remote attackers to create or delete arbitrary directories via unspecified vectors...
Design/Logic Flaw
Unspecified vulnerability in the Device Manager daemon utdevmgrd in Sun Ray Server Software 2.0, 3.0, 3.1, and 3.1.1 allows remote attackers to create or delete arbitrary directories via unspecified vectors...
CVE-2007-6482
Technical details about CVE-2007-6482 are not publicly provided in the supplied documents. Monitor for updates from official advisories; current sources only reiterate an unspecified remote denial-of-service against Sun Ray Server's utdevmgrd.