CVE Database
/

CVE-2009-4295

Back to search

CVE-2009-4295

Published: Dec 11, 2009

Modified: Sep 17, 2024

PUBLISHED

Description

Sun Ray Server Software 4.0 and 4.1 does not generate a unique DSA private key for the firmware on each Sun Ray 1, 1g, 100, and 150 DTU device, which makes it easier for remote attackers to obtain sensitive information by predicting a key and then using it to decrypt sniffed network traffic.

VendorProductVersions

n/a

n/a

affected
n/a

References

37285
vdb-entry
x_refsource_BID
270549
vendor-advisory
x_refsource_SUNALERT
ADV-2009-3477
vdb-entry
x_refsource_VUPEN

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now