CVE-2008-5423 | BDVDB-2026-33796 Detail
Description#
Sun Sun Ray Server Software 3.x and 4.0 and Sun Ray Windows Connector 1.1 and 2.0 expose the LDAP password during a configuration step, which allows local users to discover the Sun Ray administration password, and obtain admin access to the Data Store and Administration GUI, via unspecified vectors related to the utconfig component of the Server Software and the uttscadm component of the Windows Connector.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://secunia.com/advisories/33119
- http://www.securityfocus.com/bid/32772
- http://secunia.com/advisories/33108
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47258
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-240506-1
- http://sunsolve.sun.com/search/document.do?assetkey=1-21-127556-03-1
- http://support.avaya.com/elmodocs2/security/ASA-2008-500.htm
- http://securitytracker.com/id?1021379
- http://www.vupen.com/english/advisories/2008/3406
- http://sunsolve.sun.com/search/document.do?assetkey=1-21-127553-04-1
- http://www.vupen.com/english/advisories/2008/3407
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.