Vulnerability Description
Sun Sun Ray Server Software 3.x and 4.0 and Sun Ray Windows Connector 1.1 and 2.0 expose the LDAP password during a configuration step, which allows local users to discover the Sun Ray administration password, and obtain admin access to the Data Store and Administration GUI, via unspecified vectors related to the utconfig component of the Server Software and the uttscadm component of the Windows Connector.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Sun | Ray Server Software | 3.0 |
| Sun | Solaris | 8 |
| Sun | Ray Windows Connector | 1.1 |
| Novell | Suse Linux Enterprise Server | 9 |
| Redhat | Enterprise Linux | 4 |
| Sun | Java Desktop System | 2.0 |
Related Weaknesses (CWE)
References
- http://secunia.com/advisories/33108
- http://secunia.com/advisories/33119
- http://securitytracker.com/id?1021379
- http://sunsolve.sun.com/search/document.do?assetkey=1-21-127553-04-1Patch
- http://sunsolve.sun.com/search/document.do?assetkey=1-21-127556-03-1PatchVendor Advisory
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-240506-1Patch
- http://support.avaya.com/elmodocs2/security/ASA-2008-500.htm
- http://www.securityfocus.com/bid/32772
- http://www.vupen.com/english/advisories/2008/3406
- http://www.vupen.com/english/advisories/2008/3407
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47258
- http://secunia.com/advisories/33108
- http://secunia.com/advisories/33119
- http://securitytracker.com/id?1021379
- http://sunsolve.sun.com/search/document.do?assetkey=1-21-127553-04-1Patch
FAQ
What is CVE-2008-5423?
CVE-2008-5423 is a vulnerability with a CVSS score of 4.3 (MEDIUM). Sun Sun Ray Server Software 3.x and 4.0 and Sun Ray Windows Connector 1.1 and 2.0 expose the LDAP password during a configuration step, which allows local users to discover the Sun Ray administration ...
How severe is CVE-2008-5423?
CVE-2008-5423 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2008-5423?
Check the references section above for vendor advisories and patch information. Affected products include: Sun Ray Server Software, Sun Solaris, Sun Ray Windows Connector, Novell Suse Linux Enterprise Server, Redhat Enterprise Linux.