CVE-2008-5423 Sun Sun Ray Server Software 3.x and 4.0 and Sun Ray Windows Connector 1.1 and 2.0 expose the LDAP password during a configuration step, which allows local users to discover the Sun Ray administration....
MediumCVSS 4.3
EPSS 0.32%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Sun Sun Ray Server Software 3.x and 4.0 and Sun Ray Windows Connector 1.1 and 2.0 expose the LDAP password during a configuration step, which allows local users to discover the Sun Ray administration password, and obtain admin access to the Data Store and Administration GUI, via unspecified vectors related to the utconfig component of the Server Software and the uttscadm component of the Windows Connector.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sun ray server software | = 3.0 | No fix listed |
| sun ray server software | = 3.1 | No fix listed |
| sun ray server software | = 4.0 | No fix listed |
| sun ray server software | = 3.1.1 | No fix listed |
| sun ray windows connector | = 1.1 | No fix listed |
| sun ray windows connector | = 2.0 | No fix listed |
References
- 33108 third-party-advisory
- 33119 third-party-advisory
- 1021379 vdb-entry
- sunsolve.sun.com patch
- sunsolve.sun.com patch vendor-advisory
- 240506 patch vendor-advisory
- support.avaya.com
- 32772 vdb-entry
- ADV-2008-3406 vdb-entry
- ADV-2008-3407 vdb-entry
- rayserver-raywinconnector-security-bypass(47258) vdb-entry