CVE Feed

    Dashboard / CVE / CVE-2008-5422

    CVE-2008-5422

    Sun Sun Ray Server Software 3.1 through 4.0 does not properly restrict access, which allows remote attackers to discover the Sun Ray administration password, and obtain admin access to the Data Store and Administration GUI, via unspecified vectors.

    Published:Dec 11, 2008
    Last Modified:Apr 23, 2026
    EPS:Dec 11, 2008
    EPSS Score:0.01327
    CVSS Score:7.5

    Affected Products

    Vendor
    Novell
    Product
    Suse Linux Enterprise Server
    Vendor
    Redhat
    Product
    Enterprise Linux
    Vendor
    Sun
    Product
    Java Desktop System
    Vendor
    Sun
    Product
    Ray Server Software
    Vendor
    Sun
    Product
    Solaris

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2020-8118 (CVSS 5) — An authenticated server-side request forgery in Nextcloud server 16.0.1 allowed to detect local and remote ser…
    CVE-2017-1000366 (CVSS 7.8) — glibc contains a vulnerability that allows specially crafted LD_LIBRARY_PATH values to manipulate the heap/sta…
    CVE-2016-9961 (CVSS 9.8) — game-music-emu before 0.6.1 mishandles unspecified integer values.…
    CVE-2016-9960 (CVSS 5.5) — game-music-emu before 0.6.1 allows local users to cause a denial of service (divide by zero and process crash)…
    CVE-2017-7995 (CVSS 3.8) — Xen PV guest before Xen 4.3 checked access permissions to MMIO ranges only after accessing them, allowing host…
    CVE-2016-7796 (CVSS 5.5) — The manager_dispatch_notify_fd function in systemd allows local users to cause a denial of service (system han…
    CVE-2016-5759 (CVSS 7.8) — The mkdumprd script called "dracut" in the current working directory "." allows local users to trick the admin…
    CVE-2016-4997 (CVSS 7.8) — The compat IPT_SO_SET_REPLACE and IP6T_SO_SET_REPLACE setsockopt implementations in the netfilter subsystem in…
    CVE-2015-8920 (CVSS 5.5) — The _ar_read_header function in archive_read_support_format_ar.c in libarchive before 3.2.0 allows remote atta…
    CVE-2015-8919 (CVSS 7.5) — The lha_read_file_extended_header function in archive_read_support_format_lha.c in libarchive before 3.2.0 all…

    References

    http://secunia.com/advisories/33108
    http://sunsolve.sun.com/search/document.do?assetkey=1-21-127553-04-1
    http://sunsolve.sun.com/search/document.do?assetkey=1-26-240365-1
    http://support.avaya.com/elmodocs2/security/ASA-2008-502.htm
    http://www.securityfocus.com/bid/32769
    http://www.securitytracker.com/id?1021383
    http://www.vupen.com/english/advisories/2008/3406
    https://exchange.xforce.ibmcloud.com/vulnerabilities/47253
    http://secunia.com/advisories/33108
    http://sunsolve.sun.com/search/document.do?assetkey=1-21-127553-04-1
    http://sunsolve.sun.com/search/document.do?assetkey=1-26-240365-1
    http://support.avaya.com/elmodocs2/security/ASA-2008-502.htm
    http://www.securityfocus.com/bid/32769
    http://www.securitytracker.com/id?1021383
    http://www.vupen.com/english/advisories/2008/3406
    https://exchange.xforce.ibmcloud.com/vulnerabilities/47253

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High