What’s Vulnerable › Vulnerabilities

CVE-2009-2856

• Severity: low (CVSS 3.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2009-08-18 · updated 2026-06-16
• Weakness: CWE-200

Description

Sun Virtual Desktop Infrastructure (VDI) 3.0, when anonymous binding is enabled, does not properly handle a client's attempt to establish an authenticated and encrypted connection, which might allow remote attackers to read cleartext VDI configuration-data requests by sniffing LDAP sessions on the network.

Affected products

• Sun Virtual Desktop Infrastructure: 3.0

References

• http://secunia.com/advisories/36330
• http://sunsolve.sun.com/search/document.do?assetkey=1-21-141481-02-1
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-265488-1
• http://www.vupen.com/english/advisories/2009/2282
• http://secunia.com/advisories/36330
• http://sunsolve.sun.com/search/document.do?assetkey=1-21-141481-02-1
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-265488-1
• http://www.vupen.com/english/advisories/2009/2282

Get alerted when CVE-2009-2856 or the next vulnerability affects your stack