CVE-2006-4959: Medium severity Sun Secure Global Desktop vulnerability

Published Sep 23, 2006

Updated

Sun Secure Global Desktop (SSGD, aka Tarantella) before 4.3 allows remote attackers to obtain sensitive information, including hostnames, versions, and settings details, via unspecified vectors, possibly involving (1) taarchives.cgi, (2) ttaAuthentication.jsp, (3) ttalicense.cgi, (4) ttawlogin.cgi, (5) ttawebtop.cgi, (6) ttaabout.cgi, or (7) test-cgi. NOTE: This information is based upon a vague initial disclosure. Details will be updated as they become available.

Affected Software

2 affected components

Sun Secure Global Desktop=4.0

Sun Secure Global Desktop=3.42

Event History

Sep 23, 2006

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2006-4959?

CVE-2006-4959 is classified as a vulnerability with a low to medium severity level, primarily due to its potential exposure of sensitive information.

How do I fix CVE-2006-4959?

To mitigate CVE-2006-4959, you should upgrade to Sun Secure Global Desktop version 4.3 or later.

What systems are affected by CVE-2006-4959?

CVE-2006-4959 affects Sun Secure Global Desktop versions 3.42 and 4.0.

What type of information can be exposed due to CVE-2006-4959?

CVE-2006-4959 may allow attackers to access sensitive information such as hostnames, versions, and settings details.

When was CVE-2006-4959 reported?

CVE-2006-4959 was reported in September 2006.