7.5

CVE-2008-5422

Sun Sun Ray Server Software 3.1 through 4.0 does not properly restrict access, which allows remote attackers to discover the Sun Ray administration password, and obtain admin access to the Data Store and Administration GUI, via unspecified vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Sun ≫ Ray Server Software Version 3.0 Edition sparc
   Sun ≫ Solaris Version 8 Edition sparc
   Sun ≫ Solaris Version 9 Edition sparc
   Sun ≫ Solaris Version 10 Edition sparc
Sun ≫ Ray Server Software Version 3.1 Edition sparc
   Sun ≫ Solaris Version 8 Edition sparc
   Sun ≫ Solaris Version 9 Edition sparc
   Sun ≫ Solaris Version 10 Edition sparc
Sun ≫ Ray Server Software Version 4.0 Edition sparc
   Sun ≫ Solaris Version 8 Edition sparc
   Sun ≫ Solaris Version 9 Edition sparc
   Sun ≫ Solaris Version 10 Edition sparc
Sun ≫ Ray Server Software Version 3.1 Edition x86
   Sun ≫ Solaris Version 10 Edition x86
Sun ≫ Ray Server Software Version 4.0 Edition x86
   Sun ≫ Solaris Version 10 Edition x86
Sun ≫ Ray Server Software Version 3.1.1 Edition linux
   Novell ≫ Suse Linux Enterprise Server Version 9
   Redhat ≫ Enterprise Linux Version 4 Edition advanced_server
Sun ≫ Ray Server Software Version 4.0 Edition linux
   Novell ≫ Suse Linux Enterprise Server Version 9
   Redhat ≫ Enterprise Linux Version 4 Edition advanced_server
Sun ≫ Ray Server Software Version 3.0 Edition linux
   Sun ≫ Java Desktop System Version 2.0
   Novell ≫ Suse Linux Enterprise Server Version 8
   Redhat ≫ Enterprise Linux Version 3 Edition advanced_server
Sun ≫ Ray Server Software Version 3.1 Edition linux
   Sun ≫ Java Desktop System Version 2.0
   Novell ≫ Suse Linux Enterprise Server Version 8
   Redhat ≫ Enterprise Linux Version 3 Edition advanced_server
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.58% 0.832
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/33108
http://sunsolve.sun.com/search/document.do?assetkey=1-21-127553-04-1
Patch
Vendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-240365-1
Patch
Vendor Advisory
http://support.avaya.com/elmodocs2/security/ASA-2008-502.htm
http://www.securityfocus.com/bid/32769
Patch
http://www.securitytracker.com/id?1021383
http://www.vupen.com/english/advisories/2008/3406
https://exchange.xforce.ibmcloud.com/vulnerabilities/47253