CVE-2004-0701

Severity: medium (CVSS 4.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2004-07-27 · updated 2026-06-16

Description

Sun Ray Server Software (SRSS) 1.3 and 2.0 for Solaris 2.6, 7 and 8 does not properly detect a smartcard removal when the card is quickly removed, reinserted, and removed again, which could cause a user session to stay logged in and allow local users to gain unauthorized access.

Affected products

Sun Ray Server Software: 1.3, 2.0

References

http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F53922
http://www.kb.cert.org/vuls/id/100780
http://www.securityfocus.com/bid/7457
https://exchange.xforce.ibmcloud.com/vulnerabilities/11905
http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F53922
http://www.kb.cert.org/vuls/id/100780
http://www.securityfocus.com/bid/7457
https://exchange.xforce.ibmcloud.com/vulnerabilities/11905

Get alerted when CVE-2004-0701 or the next vulnerability affects your stack