Sun Sun Ray Server Software 3.x and 4.0 and Sun Ray Windows Connector 1.1 and 2.0 expose the LDAP password during a configuration step, which allows local users to discover the Sun Ray administration password, and obtain admin access to the Data Store and Administration GUI, via unspecified vectors related to the utconfig component of the Server Software and the uttscadm component of the Windows Connector.

Sun Ray Core Services version 3.1 Patch Update.
Date this patch was last updated by Sun : Nov/26/08

Sun Ray Core Services version 3.0 Patch Update.
Date this patch was last updated by Sun : Nov/26/08

ID	Name	Product	Family	Type	Severity
23559	Solaris 9 (sparc) : 120879-08	Nessus	Solaris Local Security Checks	Local	medium
23550	Solaris 9 (sparc) : 118979-04	Nessus	Solaris Local Security Checks	Local	medium
23421	Solaris 8 (sparc) : 120879-08	Nessus	Solaris Local Security Checks	Local	medium
23410	Solaris 8 (sparc) : 118979-04	Nessus	Solaris Local Security Checks	Local	medium

Detections

Analytics

CVE-2008-5423

medium

Tenable Plugins

medium

medium

medium

medium