CVE-2002-2036 Sun Ray Server Software (SRSS) 1.3, when Non-Smartcard Mobility (NSCM) is enabled, allows remote attackers to login as another user by running dtlogin from a system that supports the XDMCP client.
HighCVSS 7.5
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Sun Ray Server Software (SRSS) 1.3, when Non-Smartcard Mobility (NSCM) is enabled, allows remote attackers to login as another user by running dtlogin from a system that supports the XDMCP client.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sun ray server software | = 1.3 | No fix listed |
References
- 44069 patch vendor-advisory
- srss-nscm-unauthorized-access(9252) patch vdb-entry
- 4911 patch vdb-entry