Sun Ray Server and Sun Ray Windows Connector Information Disclosure Vulnerability
BID:32772
Info
Sun Ray Server and Sun Ray Windows Connector Information Disclosure Vulnerability
| Bugtraq ID: | 32772 |
| Class: | Design Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Dec 10 2008 12:00AM |
| Updated: | Dec 12 2008 05:31PM |
| Credit: | The vendor reported this issue. |
| Vulnerable: |
Sun Ray Windows Connector 2.0 Sun Ray Windows Connector 1.1 Sun Ray Server Software 3.1.1 Sun Ray Server Software 4.0 Sun Ray Server Software 3.1 Sun Ray Server Software 3.0 |
| Not Vulnerable: | |
Discussion
Sun Ray Server and Sun Ray Windows Connector Information Disclosure Vulnerability
Sun Ray Server and Sun Ray Windows Connector are prone to an information-disclosure vulnerability.
A local attacker can exploit this issue to obtain the Sun Ray administration password. Successful exploits will allow unauthorized users to gain access to the Sun Ray Data Store and unauthorized access to the Sun Ray Administration GUI as the 'admin' user. Other attacks are also possible.
Sun Ray Server and Sun Ray Windows Connector are prone to an information-disclosure vulnerability.
A local attacker can exploit this issue to obtain the Sun Ray administration password. Successful exploits will allow unauthorized users to gain access to the Sun Ray Data Store and unauthorized access to the Sun Ray Administration GUI as the 'admin' user. Other attacks are also possible.
Exploit / POC
Sun Ray Server and Sun Ray Windows Connector Information Disclosure Vulnerability
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Sun Ray Server and Sun Ray Windows Connector Information Disclosure Vulnerability
Solution:
The vendor has released an advisory and various patches to address these issues. Please see the references for more information.
Solution:
The vendor has released an advisory and various patches to address these issues. Please see the references for more information.
References
Sun Ray Server and Sun Ray Windows Connector Information Disclosure Vulnerability
References:
References:
- Security Vulnerabilities in Sun Ray Server Software and Sun Ray Windows Connect (Sun Microsystems)
- Sun Ray Server Homepage (Sun Microsystems)