Sun Virtual Desktop Infrastructure (VDI) Secure LDAP Vulnerability
BID:36043
Info
Sun Virtual Desktop Infrastructure (VDI) Secure LDAP Vulnerability
| Bugtraq ID: | 36043 |
| Class: | Unknown |
| CVE: |
CVE-2009-2856 |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 14 2009 12:00AM |
| Updated: | Aug 26 2009 10:02PM |
| Credit: | Sun |
| Vulnerable: |
Sun VDI 3.0 |
| Not Vulnerable: | |
Discussion
Sun Virtual Desktop Infrastructure (VDI) Secure LDAP Vulnerability
Sun Virtual Desktop (VDI) Infrastructure Software is prone to a vulnerability that may allow attackers to obtain sensitive information.
Attackers can exploit this issue to view client LDAP requests for VDI configuration data from insecure connections. This may aid in further attacks.
The issue affects Sun VDI 3.0 for SPARC and x86 platforms.
Sun Virtual Desktop (VDI) Infrastructure Software is prone to a vulnerability that may allow attackers to obtain sensitive information.
Attackers can exploit this issue to view client LDAP requests for VDI configuration data from insecure connections. This may aid in further attacks.
The issue affects Sun VDI 3.0 for SPARC and x86 platforms.
Exploit / POC
Sun Virtual Desktop Infrastructure (VDI) Secure LDAP Vulnerability
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Sun Virtual Desktop Infrastructure (VDI) Secure LDAP Vulnerability
Solution:
The vendor has released an advisory and fixes. Please see the references for details.
Sun VDI 3.0
Solution:
The vendor has released an advisory and fixes. Please see the references for details.
Sun VDI 3.0
References
Sun Virtual Desktop Infrastructure (VDI) Secure LDAP Vulnerability
References:
References: