Wyse Thin Client CVE-2009-0695 Remote Security Bypass Vulnerability

Bugtraq ID:	54028
Class:	Access Validation Error
CVE:	CVE-2009-0695
Remote:	Yes
Local:	No
Published:	Oct 13 2009 12:00AM
Updated:	Oct 13 2009 12:00AM
Credit:	Kevin Finisterre
Vulnerable:	Wyse Thin Client 0
Not Vulnerable:

Wyse Thin Client CVE-2009-0695 Remote Security Bypass Vulnerability

Wyse Thin Client is prone to a security-bypass vulnerability.

Successfully exploiting this issue may allow an attacker to bypass security restrictions and perform unauthorized actions.

Wyse Thin Client CVE-2009-0695 Remote Security Bypass Vulnerability

The following exploit is available:

• /data/vulnerabilities/exploits/54028.rb

Wyse Thin Client CVE-2009-0695 Remote Security Bypass Vulnerability

References:

• 'Secure' Wyse thin clients vulnerable to remote exploit bugs (Dan Goodin)
  
• Vendor Homepage (Wyse)
  
• Security WSB09-01 Update available for Wyse Device Manager (Wyse)
  
• Wyse Device Manager (WDM) HServer and HAgent contain multiple vulnerabilities (US-CERT)