CVE-2008-5422: sun ray_server_software

EPSS trend

Probability

2.58%

Chance of exploitation in the next 30 days

Percentile

85%

Versus all other CVEs

30-day change

0.00 pp

From 2.58% on 18-09-2026

18-09-202618-10-2026

EPSS score

2.58%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

8 links

support.avaya.com/elmodocs2/security/ASA-2008-502.htmX Refsource CONFIRM
secunia.com/advisories/33108Third Party AdvisoryX Refsource SECUNIA
www.securityfocus.com/bid/32769VDB EntryX Refsource BIDPatch
exchange.xforce.ibmcloud.com/vulnerabilities/47253VDB EntryX Refsource XF
www.vupen.com/english/advisories/2008/3406VDB EntryX Refsource VUPEN
www.securitytracker.com/id?1021383VDB EntryX Refsource SECTRACK
sunsolve.sun.com/search/document.do?assetkey=1-21-127553-04-1X Refsource CONFIRMPatchVendor Advisory
sunsolve.sun.com/search/document.do?assetkey=1-26-240365-1Vendor AdvisoryX Refsource SUNALERTPatch

Related vulnerabilities

CVE-2007-0482sunray_server_software0.36%19y ago25-01-2007 00:00cgi-bin/main in Sun Ray Server Software 2.0 and 3.0 before 20070123 allows local users to obtain the utadmin password by reading a web server's log file, or by conducting a different, unspecified local attack.CVE-2007-6481sunray_server_software2.60%18y ago20-12-2007 20:00Unspecified vulnerability in the Device Manager daemon (utdevmgrd) in Sun Ray Server Software 2.0, 3.0, 3.1, and 3.1.1 allows remote attackers to create or delete arbitrary directories via unspecified vectors.CVE-2007-6482sunray_server_software2.97%18y ago20-12-2007 20:00Unspecified vulnerability in the Device Manager daemon (utdevmgrd) in Sun Ray Server Software 2.0, 3.0, 3.1, and 3.1.1 allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors.CVE-2008-2112sunray_server_software2.54%18y ago08-05-2008 00:00Unspecified vulnerability in Sun Ray Kiosk Mode 4.0 allows local and remote authenticated Sun Ray administrators to gain root privileges via unknown vectors related to utconfig.CVE-2008-5423sunray_server_software+10.32%17y ago11-12-2008 15:00Sun Sun Ray Server Software 3.x and 4.0 and Sun Ray Windows Connector 1.1 and 2.0 expose the LDAP password during a configuration step, which allows local users to discover the Sun Ray administration password, and obtain admin access to the Data Store and Administration GUI, via unspecified vectors related to the utconfig component of the Server Software and the uttscadm component of the Windows Connector.CVE-2004-0701sunray_server_software0.35%22y ago21-07-2004 04:00Sun Ray Server Software (SRSS) 1.3 and 2.0 for Solaris 2.6, 7 and 8 does not properly detect a smartcard removal when the card is quickly removed, reinserted, and removed again, which could cause a user session to stay logged in and allow local users to gain unauthorized access.

All vulnerabilities inray_server_software

CVE-2008-5422: sun ray_server_software

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References