Sun Ray Kiosk Mode Unspecified Privilege Escalation Vulnerability
BID:29092
Info
Sun Ray Kiosk Mode Unspecified Privilege Escalation Vulnerability
| Bugtraq ID: | 29092 |
| Class: | Unknown |
| CVE: |
CVE-2008-2112 |
| Remote: | Yes |
| Local: | Yes |
| Published: | May 07 2008 12:00AM |
| Updated: | May 07 2015 05:29PM |
| Credit: | The vendor disclosed this issue. |
| Vulnerable: |
Sun Ray Server Software 4.0 |
| Not Vulnerable: | |
Discussion
Sun Ray Kiosk Mode Unspecified Privilege Escalation Vulnerability
Sun Ray Server Software is prone to an unspecified privilege-escalation vulnerability. This issue affects the software when it is running in Kiosk Mode and is exploitable only by attackers with administrative privileges in the web-based administrative interface.
Successfully exploiting this issue allows local and remote attackers to gain superuser access to the underlying operating system running the vulnerable software. This facilitates the complete compromise of affected computers.
Sun Ray Server Software is prone to an unspecified privilege-escalation vulnerability. This issue affects the software when it is running in Kiosk Mode and is exploitable only by attackers with administrative privileges in the web-based administrative interface.
Successfully exploiting this issue allows local and remote attackers to gain superuser access to the underlying operating system running the vulnerable software. This facilitates the complete compromise of affected computers.
Exploit / POC
Sun Ray Kiosk Mode Unspecified Privilege Escalation Vulnerability
Currently we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Sun Ray Kiosk Mode Unspecified Privilege Escalation Vulnerability
Solution:
The vendor has released an advisory and fixes. Please see the references for more information.
Sun Ray Server Software 4.0
Solution:
The vendor has released an advisory and fixes. Please see the references for more information.
Sun Ray Server Software 4.0
-
Sun 128165-01
Solaris SPARC
http://sunsolve.sun.com/search/document.do?assetkey=1-21-128165-01 -
Sun 128166-01
Solaris x86
http://sunsolve.sun.com/search/document.do?assetkey=1-21-128166-01 -
Sun 128167-01
Linux
http://sunsolve.sun.com/search/document.do?assetkey=1-21-128167-01
References
Sun Ray Kiosk Mode Unspecified Privilege Escalation Vulnerability
References:
References: