Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2008-5423

Sun Sun Ray Server Software 3.x and 4.0 and Sun Ray Windows Connector 1.1 and 2.0 expose the LDAP password during a configuration step, which allows local users to discover the Sun Ray administration password, and obtain admin access to the Data Store and Administration GUI, via unspecified vectors related to the utconfig component of the Server Software and the uttscadm component of the Windows Connector.

Published

2008-12-11T15:30:00.487

Last Modified

2025-04-09T00:30:58.490

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 4.3 (MEDIUM)

CVSSv2 Vector

AV:L/AC:L/Au:S/C:P/I:P/A:P

  • Access Vector: LOCAL
  • Access Complexity: LOW
  • Authentication: SINGLE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

3.1

Impact Score

6.4

Weaknesses
  • Type: Primary
    CWE-200
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application sun ray_server_software 3.0 Yes
Application sun ray_server_software 3.1 Yes
Application sun ray_server_software 4.0 Yes
Operating System sun solaris 8 No
Operating System sun solaris 9 No
Operating System sun solaris 10 No
Application sun ray_server_software 3.1 Yes
Application sun ray_server_software 4.0 Yes
Operating System sun solaris 10 No
Application sun ray_windows_connector 1.1 Yes
Application sun ray_windows_connector 2.0 Yes
Application sun ray_server_software 3.1 Yes
Application sun ray_server_software 4.0 Yes
Application sun ray_windows_connector 1.1 Yes
Application sun ray_windows_connector 2.0 Yes
Application sun ray_server_software 3.1 Yes
Application sun ray_server_software 4.0 Yes
Application sun ray_windows_connector 1.1 Yes
Application sun ray_windows_connector 2.0 Yes
Application sun ray_server_software 3.1.1 Yes
Application sun ray_server_software 4.0 Yes
Application sun ray_server_software 3.1.1 Yes
Application sun ray_server_software 4.0 Yes
Operating System novell suse_linux_enterprise_server 9 No
Operating System redhat enterprise_linux 4 No
Application sun ray_server_software 3.0 Yes
Application sun ray_server_software 3.1 Yes
Application sun java_desktop_system 2.0 No
Operating System novell suse_linux_enterprise_server 8 No
Operating System redhat enterprise_linux 3 No
References