CVE-2008-5423

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-12-11 · updated 2026-06-16
Weakness: CWE-200

Description

Sun Sun Ray Server Software 3.x and 4.0 and Sun Ray Windows Connector 1.1 and 2.0 expose the LDAP password during a configuration step, which allows local users to discover the Sun Ray administration password, and obtain admin access to the Data Store and Administration GUI, via unspecified vectors related to the utconfig component of the Server Software and the uttscadm component of the Windows Connector.

Affected products

Sun Ray Server Software: 3.0, 3.1, 4.0, 3.1.1
Sun Ray Windows Connector: 1.1, 2.0

References

http://secunia.com/advisories/33108
http://secunia.com/advisories/33119
http://securitytracker.com/id?1021379
http://sunsolve.sun.com/search/document.do?assetkey=1-21-127553-04-1
http://sunsolve.sun.com/search/document.do?assetkey=1-21-127556-03-1
http://sunsolve.sun.com/search/document.do?assetkey=1-26-240506-1
http://support.avaya.com/elmodocs2/security/ASA-2008-500.htm
http://www.securityfocus.com/bid/32772
http://www.vupen.com/english/advisories/2008/3406
http://www.vupen.com/english/advisories/2008/3407
https://exchange.xforce.ibmcloud.com/vulnerabilities/47258
http://secunia.com/advisories/33108

Get alerted when CVE-2008-5423 or the next vulnerability affects your stack