CVE-2006-4049 - Unspecified vulnerability in the utxconfig utility in Sun Ray Server Software 3.x allows local users

CVE-2006-4049

Summary

Unspecified vulnerability in the utxconfig utility in Sun Ray Server Software 3.x allows local users to create or overwrite arbitrary files via unknown attack vectors.

References

http://secunia.com/advisories/21398
http://securitytracker.com/id?1016647
http://sunsolve.sun.com/search/document.do?assetkey=1-26-101924-1
http://www.securityfocus.com/bid/19394
http://www.vupen.com/english/advisories/2006/3226
https://exchange.xforce.ibmcloud.com/vulnerabilities/28260

Vulnerable Configurations

cpe:2.3:a:sun:ray_server_software:3.0:*:*:*:*:*:*:*
cpe:2.3:a:sun:ray_server_software:3.0:*:*:*:*:*:*:*

CVSS

Base:	2.1 (as of 20-07-2017 - 01:32)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
LOCAL	LOW	NONE

Impact

Confidentiality	Integrity	Availability
NONE	PARTIAL	NONE

cvss-vector via4

AV:L/AC:L/Au:N/C:N/I:P/A:N

refmap via4

bid	19394
sectrack	1016647
secunia	21398
sunalert	101924
vupen	ADV-2006-3226
xf	sun-ray-utxconfig-file-manipulation(28260)

Last major update

20-07-2017 - 01:32

Published

09-08-2006 - 23:04

Last modified

20-07-2017 - 01:32