CVE-2002-2036

Sun Ray Server Software SRSS 1.3, when Non-Smartcard Mobility NSCM is enabled, allows remote attackers to login as another user by running dtlogin from a system that supports the XDMCP client...

CVE-2009-4295

Sun Ray Server Software 4.0 and 4.1 does not generate a unique DSA private key for the firmware on each Sun Ray 1, 1g, 100, and 150 DTU device, which makes it easier for remote attackers to obtain sensitive information by predicting a key and then using it to decrypt sniffed network traffic...

Unspecified Vulnerability in Oracle Virtualization Sun Ray Software Component

Oracle Virtualization Sun Ray Software is a suite of software from Oracle that provides a rich virtual desktop experience for Sun Ray clients, PCs and portables. A security vulnerability exists in the Web Console subcomponent of the Sun Ray Software component of Oracle Virtualization versions pri...

CVE-2015-4727

Unspecified vulnerability in Oracle Virtualization Sun Ray Software before 5.4.4 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Web Console...

Buffer overflow

Unspecified vulnerability in Oracle Virtualization Sun Ray Software before 5.4.4 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Web Console...

CVE-2015-4727

Unspecified vulnerability in Oracle Virtualization Sun Ray Software before 5.4.4 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Web Console...

CVE-2015-4727

CVE-2015-4727 affects Oracle Virtualization Sun Ray Software Web Console. The CNVD entry specifies an unspecified vulnerability in Sun Ray Software Web Console prior to version 5.4.4, allowing a remote attacker to read, update, insert, or delete data and potentially cause a denial of service. Aff...

Solaris 10 (sparc) : 139548-07 (deprecated)

Sun Ray Core Services version 4.1 Patch Update. Date this patch was last updated by Sun : Sep/16/10 This plugin has been deprecated and either replaced with individual 139548 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@...

Solaris 10 (sparc) : 140993-05 (deprecated)

Sun Ray Core Services version 4.2 Patch Update. Date this patch was last updated by Sun : Sep/16/10 This plugin has been deprecated and either replaced with individual 140993 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@...

CVE-2011-3538

Unspecified vulnerability in the Sun Ray component in Oracle Virtualization 4.0 allows remote attackers to affect integrity, related to Authentication. NOTE: this identifier was inadvertently used for an Oracle Industry Applications issue involving TMS Help, but that issue has been assigned...

CVE-2011-3538

Unspecified vulnerability in the Sun Ray component in Oracle Virtualization 4.0 allows remote attackers to affect integrity, related to Authentication. NOTE: this identifier was inadvertently used for an Oracle Industry Applications issue involving TMS Help, but that issue has been assigned...

CVE-2011-3538

Technical details about CVE-2011-3538 are not publicly available in the provided documents; the entries reference Sun Ray in Oracle Virtualization 4.0 and a note about CVE-2011-2323, but no explicit vulnerability specifics are given.

Code injection

Unspecified vulnerability in the Sun Ray Server Software component in Oracle Sun Product Suite 4.0, 4.1, and 4.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Device Services...

CVE-2010-0888

Unspecified vulnerability in the Sun Ray Server Software component in Oracle Sun Product Suite 4.0, 4.1, and 4.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Device Services...

CVE-2010-0888

CVE-2010-0888 affects Sun Ray Server Software within Oracle Sun Product Suite 4.0–4.2. The Sun Ray vulnerability is described as unspecified with remote impact to confidentiality, integrity, and availability via unknown vectors related to Device Services. Provided sources indicate a historical Or...

Sun Update with 16 Fixes Coming Next Week

Oracle has moved Solaris onto its quarterly security patch schedule, meaning users of the Sun Microsystems operating system will now know months in advance when they will be getting security updates. The next Critical Patch Update is due on Tuesday. The update will include 16 security fixes for S...

CVE-2009-4314

Sun Ray Server Software 4.1 on Solaris 10, when Automatic Multi-Group Hotdesking AMGH is enabled, responds to a logout action by immediately logging the user in again, which makes it easier for physically proximate attackers to obtain access to a session by going to an unattended DTU device...

Design/Logic Flaw

Sun Ray Server Software 4.1 on Solaris 10, when Automatic Multi-Group Hotdesking AMGH is enabled, responds to a logout action by immediately logging the user in again, which makes it easier for physically proximate attackers to obtain access to a session by going to an unattended DTU device...

CVE-2009-4314

CVE-2009-4314 affects Sun Ray Server Software 4.1 on Solaris 10. When Automatic Multi-Group Hotdesking (AMGH) is enabled, a logout action results in the user being immediately logged back in, enabling physical access by someone at an unattended DTU device to gain a session. Root cause is the logo...

CVE-2009-4314

Sun Ray Server Software 4.1 on Solaris 10, when Automatic Multi-Group Hotdesking AMGH is enabled, responds to a logout action by immediately logging the user in again, which makes it easier for physically proximate attackers to obtain access to a session by going to an unattended DTU device...