NVD

Id
50078  
Name
CVE-2009-2856  
Description
Sun Virtual Desktop Infrastructure (VDI) 3.0, when anonymous binding is enabled, does not properly handle a client"s attempt to establish an authenticated and encrypted connection, which might allow remote attackers to read cleartext VDI configuration-data requests by sniffing LDAP sessions on the network.  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2009-08-18  
Modified Date
2009-08-21  
Seq
2009-2856  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
253416 50078 CVE-2009-2856 http://sunsolve.sun.com/search/document.do?assetkey=1-21-141481-02-1  View
253417 50078 CVE-2009-2856 265488  View
253418 50078 CVE-2009-2856 ADV-2009-2282  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
45221 JVNDB-2009-006228 Sun VDI における VDI 設定データを平文で読まれる脆弱性 Sun Virtual Desktop Infrastructure (VDI) は、匿名のバインドが有効になっている際、認証かつ暗号化された接続の確立を試みるクライアント操作を適切に処理しないため、VDI 設定データを平文で読まれる脆弱性が存在します。 CVE-2009-2856 40287 CVE-2009-2856 50078 3.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-006228.html 2009-08-14 2012-12-20 View