CVE-2004-0701 Sun Ray Server Software (SRSS) 1.3 and 2.0 for Solaris 2.6, 7 and 8 does not properly detect a smartcard removal when the card is quickly removed, reinserted, and removed again, which could cause a us...
MediumCVSS 4.6
EPSS 0.35%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Sun Ray Server Software (SRSS) 1.3 and 2.0 for Solaris 2.6, 7 and 8 does not properly detect a smartcard removal when the card is quickly removed, reinserted, and removed again, which could cause a user session to stay logged in and allow local users to gain unauthorized access.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sun ray server software | = 1.3 | No fix listed |
| sun ray server software | = 2.0 | No fix listed |
References
- 53922 vendor-advisory
- VU#100780 third-party-advisory us-government-resource
- 7457 patch vdb-entry vendor-advisory
- sun-ray-session-access(11905) vdb-entry