Vulnerability CVE-2008-5423 - CERT Civis.Net

Vulnerability Name:

CVE-2008-5423 (CCN-47258)

Assigned:

2008-12-05

Published:

2008-12-05

Updated:

2018-10-30

Summary:

Sun Sun Ray Server Software 3.x and 4.0 and Sun Ray Windows Connector 1.1 and 2.0 expose the LDAP password during a configuration step, which allows local users to discover the Sun Ray administration password, and obtain admin access to the Data Store and Administration GUI, via unspecified vectors related to the utconfig component of the Server Software and the uttscadm component of the Windows Connector.

CVSS v3 Severity:

5.9 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)

Exploitability Metrics:	Attack Vector (AV): Local Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): Low Integrity (I): Low Availibility (A): Low

CVSS v2 Severity:

4.3 Medium (CVSS v2 Vector: AV:L/AC:L/Au:S/C:P/I:P/A:P)
3.2 Low (Temporal CVSS v2 Vector: AV:L/AC:L/Au:S/C:P/I:P/A:P/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Local Access Complexity (AC): Low Authentication (Au): Single_Instance
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

4.4 Medium (CCN CVSS v2 Vector: AV:L/AC:M/Au:N/C:P/I:P/A:P)
3.2 Low (CCN Temporal CVSS v2 Vector: AV:L/AC:M/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Local Access Complexity (AC): Medium Athentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

Vulnerability Type:

Vulnerability Consequences:

Bypass Security

References:

Source: MITRE
Type: CNA
CVE-2008-5423

Source: CCN
Type: SA33108
Sun Ray Server Software Two Vulnerabilities

Source: SECUNIA
Type: UNKNOWN
33108

Source: CCN
Type: SA33119
Sun Ray Windows Connector Information Disclosure Vulnerability

Source: SECUNIA
Type: UNKNOWN
33119

Source: CCN
Type: SECTRACK ID: 1021379
Sun Ray Server Lets Local Users Obtain the Administrative Password in Certain Cases

Source: SECTRACK
Type: UNKNOWN
1021379

Source: CONFIRM
Type: Patch
http://sunsolve.sun.com/search/document.do?assetkey=1-21-127553-04-1

Source: CONFIRM
Type: Patch, Vendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-21-127556-03-1

Source: SUNALERT
Type: Patch
240506

Source: CCN
Type: Sun Alert ID: 240506
Security Vulnerabilities in Sun Ray Server Software and Sun Ray Windows Connector May Compromise the Sun Ray Administration Password

Source: CONFIRM
Type: UNKNOWN
http://support.avaya.com/elmodocs2/security/ASA-2008-500.htm

Source: CCN
Type: ASA-2008-500
Security Vulnerabilities in Sun Ray Server Software and Sun Ray Windows Connector May Compromise the Sun Ray Administration Password (Sun 240506)

Source: CCN
Type: OSVDB ID: 50693
Sun Ray Windows Connector Unspecified Local Administration Password Disclosure

Source: CCN
Type: OSVDB ID: 51176
Sun Ray Server Software (SRSS) utconfig Configuration Process LDAP Password Local Disclosure

Source: BID
Type: UNKNOWN
32772

Source: CCN
Type: BID-32772
Sun Ray Server and Sun Ray Windows Connector Information Disclosure Vulnerability

Source: VUPEN
Type: UNKNOWN
ADV-2008-3406

Source: VUPEN
Type: UNKNOWN
ADV-2008-3407

Source: XF
Type: UNKNOWN
rayserver-raywinconnector-security-bypass(47258)

Source: XF
Type: UNKNOWN
rayserver-raywinconnector-security-bypass(47258)

Vulnerable Configuration:

Configuration 1:

cpe:/a:sun:ray_server_software:3.0:*:sparc:*:*:*:*:*

OR cpe:/a:sun:ray_server_software:3.1:*:sparc:*:*:*:*:*

OR cpe:/a:sun:ray_server_software:4.0:*:sparc:*:*:*:*:*

AND

cpe:/o:sun:solaris:8:*:sparc:*:*:*:*:*

OR cpe:/o:sun:solaris:9:*:sparc:*:*:*:*:*

OR cpe:/o:sun:solaris:10:*:sparc:*:*:*:*:*

Configuration 2:

cpe:/a:sun:ray_server_software:3.1:*:x86:*:*:*:*:*

OR cpe:/a:sun:ray_server_software:4.0:*:x86:*:*:*:*:*

AND

cpe:/o:sun:solaris:10:*:x86:*:*:*:*:*

Configuration 3:

cpe:/a:sun:ray_windows_connector:1.1:*:sparc:*:*:*:*:*

OR cpe:/a:sun:ray_windows_connector:2.0:*:sparc:*:*:*:*:*

AND

cpe:/a:sun:ray_server_software:3.1:*:sparc:*:*:*:*:*

OR cpe:/a:sun:ray_server_software:4.0:*:sparc:*:*:*:*:*

Configuration 4:

cpe:/a:sun:ray_windows_connector:1.1:*:x86:*:*:*:*:*

OR cpe:/a:sun:ray_windows_connector:2.0:*:x86:*:*:*:*:*

AND

cpe:/a:sun:ray_server_software:3.1:*:x86:*:*:*:*:*

OR cpe:/a:sun:ray_server_software:4.0:*:x86:*:*:*:*:*

Configuration 5:

cpe:/a:sun:ray_windows_connector:1.1:*:linux:*:*:*:*:*

OR cpe:/a:sun:ray_windows_connector:2.0:*:linux:*:*:*:*:*

AND

cpe:/a:sun:ray_server_software:3.1.1:*:linux:*:*:*:*:*

OR cpe:/a:sun:ray_server_software:4.0:*:linux:*:*:*:*:*

Configuration 6:

cpe:/a:sun:ray_server_software:3.1.1:*:linux:*:*:*:*:*

OR cpe:/a:sun:ray_server_software:4.0:*:linux:*:*:*:*:*

AND

cpe:/o:novell:suse_linux_enterprise_server:9:*:*:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:4:*:advanced_server:*:*:*:*:*

Configuration 7:

cpe:/a:sun:ray_server_software:3.0:*:linux:*:*:*:*:*

OR cpe:/a:sun:ray_server_software:3.1:*:linux:*:*:*:*:*

AND

cpe:/a:sun:java_desktop_system:2.0:*:*:*:*:*:*:*

OR cpe:/o:novell:suse_linux_enterprise_server:8:*:*:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:3:*:advanced_server:*:*:*:*:*

Configuration CCN 1:

cpe:/a:sun:ray_server_software:3.0:*:*:*:*:*:*:*

OR cpe:/a:sun:ray_server_software:3.1:*:*:*:*:*:*:*

OR cpe:/a:sun:ray_server_software:3.1.1:*:*:*:*:*:*:*

OR cpe:/a:sun:ray_server_software:3.2:*:*:*:*:*:*:*

OR cpe:/a:sun:ray_server_software:3.3:*:*:*:*:*:*:*

OR cpe:/a:sun:ray_server_software:3.5:*:*:*:*:*:*:*

OR cpe:/a:sun:ray_server_software:3.6:*:*:*:*:*:*:*

OR cpe:/a:sun:ray_server_software:3.7:*:*:*:*:*:*:*

OR cpe:/a:sun:ray_server_software:4.0:*:*:*:*:*:*:*

OR cpe:/a:sun:ray_windows_connector:1.1:*:linux:*:*:*:*:*

Denotes that component is vulnerable