Ray Server Software (Sun) - vulnerabilities (CVEs)
15 CVEs, 0 in the last 30 days, 25 known versions, newest CVE from 2009-12-14. Vendor: Sun.
CVEs of Ray Server Software
- CVE-2009-4314 - CVSS 4.4 (medium), 2009-12-14: Sun Ray Server Software 4.1 on Solaris 10, when Automatic Multi-Group Hotdesking (AMGH) is enabled, responds to a logout action by immediately logging the…
- CVE-2009-4294 - CVSS 10 (critical), 2009-12-11: Unspecified vulnerability in the Authentication Manager (aka utauthd) in Sun Ray Server Software 4.0 and 4.1 allows remote attackers to execute arbitrary code…
- CVE-2009-4295 - CVSS 7.8 (high), 2009-12-11: Sun Ray Server Software 4.0 and 4.1 does not generate a unique DSA private key for the firmware on each Sun Ray 1, 1g, 100, and 150 DTU device, which makes it…
- CVE-2009-2489 - CVSS 2.1 (low), 2009-07-16: Unspecified vulnerability in the utdmsession program in Sun Ray Server Software (SRSS) 4.0 allows local users to access the sessions of arbitrary users via…
- CVE-2009-2491 - CVSS 4.4 (medium), 2009-07-16: The utaudiod daemon in Sun Ray Server Software (SRSS) 4.0, when Solaris Trusted Extensions is enabled, allows local users to access the sessions of arbitrary…
- CVE-2009-2490 - CVSS 1.9 (low), 2009-07-16: Unspecified vulnerability in the utaudiod daemon in Sun Ray Server Software (SRSS) 4.0, when Solaris Trusted Extensions is enabled, allows local users to…
- CVE-2008-5423 - CVSS 4.3 (medium), 2008-12-11: Sun Sun Ray Server Software 3.x and 4.0 and Sun Ray Windows Connector 1.1 and 2.0 expose the LDAP password during a configuration step, which allows local…
- CVE-2008-5422 - CVSS 7.5 (high), 2008-12-11: Sun Sun Ray Server Software 3.1 through 4.0 does not properly restrict access, which allows remote attackers to discover the Sun Ray administration password,…
- CVE-2008-2112 - CVSS 8.5 (high), 2008-05-08: Unspecified vulnerability in Sun Ray Kiosk Mode 4.0 allows local and remote authenticated Sun Ray administrators to gain root privileges via unknown vectors…
- CVE-2007-6482 - CVSS 7.8 (high), 2007-12-20: Unspecified vulnerability in the Device Manager daemon (utdevmgrd) in Sun Ray Server Software 2.0, 3.0, 3.1, and 3.1.1 allows remote attackers to cause a…
- CVE-2007-6481 - CVSS 6.4 (medium), 2007-12-20: Unspecified vulnerability in the Device Manager daemon (utdevmgrd) in Sun Ray Server Software 2.0, 3.0, 3.1, and 3.1.1 allows remote attackers to create or…
- CVE-2007-0482 - CVSS 4.6 (medium), 2007-01-25: cgi-bin/main in Sun Ray Server Software 2.0 and 3.0 before 20070123 allows local users to obtain the utadmin password by reading a web server's log file, or…
- CVE-2006-4049 - CVSS 2.1 (low), 2006-08-09: Unspecified vulnerability in the utxconfig utility in Sun Ray Server Software 3.x allows local users to create or overwrite arbitrary files via unknown attack…
- CVE-2004-0701 - CVSS 4.6 (medium), 2004-07-27: Sun Ray Server Software (SRSS) 1.3 and 2.0 for Solaris 2.6, 7 and 8 does not properly detect a smartcard removal when the card is quickly removed, reinserted,…
- CVE-2002-2036 - CVSS 7.5 (high), 2002-12-31: Sun Ray Server Software (SRSS) 1.3, when Non-Smartcard Mobility (NSCM) is enabled, allows remote attackers to login as another user by running dtlogin from a…