CVE-2004-0701: Medium severity Sun Ray Server Software vulnerability

Published Jul 21, 2004

Updated

Sun Ray Server Software (SRSS) 1.3 and 2.0 for Solaris 2.6, 7 and 8 does not properly detect a smartcard removal when the card is quickly removed, reinserted, and removed again, which could cause a user session to stay logged in and allow local users to gain unauthorized access.

Affected Software

2 affected components

Sun Ray Server Software=1.3

Sun Ray Server Software=2.0

Remediation

Patch Available

http://www.securityfocus.com/bid/7457

Event History

Jul 21, 2004

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2004-0701?

CVE-2004-0701 has a medium severity level due to the potential for unauthorized local access.

How do I fix CVE-2004-0701?

To fix CVE-2004-0701, update the Sun Ray Server Software to the latest version that addresses this vulnerability.

Who is affected by CVE-2004-0701?

CVE-2004-0701 affects users of Sun Ray Server Software versions 1.3 and 2.0 running on Solaris 2.6, 7, and 8.

What could happen if CVE-2004-0701 is exploited?

Exploitation of CVE-2004-0701 could allow unauthorized local users to gain access to active sessions.

When was CVE-2004-0701 reported?

CVE-2004-0701 was reported in 2004, highlighting security concerns with smartcard session management.