// For flags

CVE-2009-2489

 

Severity Score

2.1
*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Unspecified vulnerability in the utdmsession program in Sun Ray Server Software (SRSS) 4.0 allows local users to access the sessions of arbitrary users via unknown vectors.

Vulnerabilidad sin especificar en el programa utdmsession en Sun Ray Server Software (SRSS) v4.0, permite a usuarios locales acceder a las sesiones de usuarios de su elección a través de vectores desconocidos.

*Credits: N/A
CVSS Scores
Attack Vector
Local
Attack Complexity
Low
Authentication
None
Confidentiality
None
Integrity
Partial
Availability
None
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2009-07-16 CVE Reserved
  • 2009-07-16 CVE Published
  • 2023-03-08 EPSS Updated
  • 2024-08-07 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Sun
Search vendor "Sun"
Ray Server Software
Search vendor "Sun" for product "Ray Server Software"
4.0
Search vendor "Sun" for product "Ray Server Software" and version "4.0"
-
Affected
Sun
Search vendor "Sun"
Ray Server Software
Search vendor "Sun" for product "Ray Server Software"
4.0
Search vendor "Sun" for product "Ray Server Software" and version "4.0"
linux
Affected
Sun
Search vendor "Sun"
Ray Server Software
Search vendor "Sun" for product "Ray Server Software"
4.0
Search vendor "Sun" for product "Ray Server Software" and version "4.0"
sparc
Affected
Sun
Search vendor "Sun"
Ray Server Software
Search vendor "Sun" for product "Ray Server Software"
4.0
Search vendor "Sun" for product "Ray Server Software" and version "4.0"
x86
Affected