7.8

CVE-2009-4295

Sun Ray Server Software 4.0 and 4.1 does not generate a unique DSA private key for the firmware on each Sun Ray 1, 1g, 100, and 150 DTU device, which makes it easier for remote attackers to obtain sensitive information by predicting a key and then using it to decrypt sniffed network traffic.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Sun ≫ Ray Server Software Version 4.0 Edition linux
Sun ≫ Ray Server Software Version 4.0 Edition sparc
Sun ≫ Ray Server Software Version 4.0 Edition x86
Sun ≫ Ray Server Software Version 4.1 Edition linux
Sun ≫ Ray Server Software Version 4.1 Edition sparc
Sun ≫ Ray Server Software Version 4.1 Edition x86
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.43% 0.695
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.8 10 6.9
AV:N/AC:L/Au:N/C:C/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://sunsolve.sun.com/search/document.do?assetkey=1-21-127553-07-1
Patch
http://www.vupen.com/english/advisories/2009/3477
Vendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-66-270549-1
Vendor Advisory
http://www.securityfocus.com/bid/37285
Patch