PT-2007-1942 · Oracle · Sun Ray Server

Publicado 2007-01-25 · Atualizado 2017-07-29 · CVE-2007-0482

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Sun Ray Server Software versions 2.0 through 3.0 before 20070123

Description The issue allows local users to obtain the utadmin password by reading a web server's log file or by conducting a different local attack. This is related to the cgi-bin/main component.

Recommendations For Sun Ray Server Software versions 2.0 through 3.0 before 20070123, update to a version released after 20070123 to resolve the issue. As a temporary workaround, consider restricting access to the log files of the web server and limiting local user privileges to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2007-0482

Produtos afetados

Sun Ray Server

Referências · 8

• http://secunia.com/advisories/23900 · Nota
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-102779-1 · Aviso do Fabricante
• http://osvdb.org/31671 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-0482 · Nota de Segurança
• http://securityfocus.com/bid/22192 · Nota
• http://vupen.com/english/advisories/2007/0316 · Nota
• http://securitytracker.com/id?1017547 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/31700 · Nota