VulnerabilityModified
CVE-2009-2491
The utaudiod daemon in Sun Ray Server Software (SRSS) 4.0, when Solaris Trusted Extensions is enabled, allows local users to access the sessions of arbitrary users via unknown vectors related to "resource leaks."
MEDIUM 4.4EPSS 0.28%
Does this matter?
Lower severity and a low EPSS score (0.28%). Track it; it rarely justifies an emergency change on its own.
Description
The utaudiod daemon in Sun Ray Server Software (SRSS) 4.0, when Solaris Trusted Extensions is enabled, allows local users to access the sessions of arbitrary users via unknown vectors related to "resource leaks."
- CVSS 2.0
- 4.4 MEDIUMAV:L/AC:M/Au:N/C:P/I:P/A:P
- EPSS
- 0.28% probability · 21th percentile
- CISA KEV
- Not listed
- Affected
- sun/ray server software
- Source
- cve@mitre.org
References
- http://osvdb.org/55978
- http://sunsolve.sun.com/search/document.do?assetkey=1-21-127553-06-1Patch
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-253889-1Patch, Vendor Advisory
- http://www.vupen.com/english/advisories/2009/1915
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51742
- http://osvdb.org/55978
- http://sunsolve.sun.com/search/document.do?assetkey=1-21-127553-06-1Patch
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-253889-1Patch, Vendor Advisory
- http://www.vupen.com/english/advisories/2009/1915
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51742
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.