NVD

Id
51418  
Name
CVE-2009-4295  
Description
Sun Ray Server Software 4.0 and 4.1 does not generate a unique DSA private key for the firmware on each Sun Ray 1, 1g, 100, and 150 DTU device, which makes it easier for remote attackers to obtain sensitive information by predicting a key and then using it to decrypt sniffed network traffic.  
Reject
 
CVSS Version
2  
CVSS Score
7.8  
Severity
High  
CVSS Base Score
7.8  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:N/A:N)  
Pub Date
2017-01-07  
Published
2009-12-11  
Modified Date
2009-12-14  
Seq
2009-4295  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
260775 51418 CVE-2009-4295 http://sunsolve.sun.com/search/document.do?assetkey=1-21-127553-07-1  View
260776 51418 CVE-2009-4295 270549  View
260777 51418 CVE-2009-4295 37285  View
260778 51418 CVE-2009-4295 ADV-2009-3477  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
45525 JVNDB-2009-006532 Sun Ray Server Software における重要な情報を取得される脆弱性 Sun Ray Server Software は、各 Sun Ray 1、1g、100、および 150 DTU デバイス上のファームウェアに対する一意の DSA のプライベート鍵を生成しないため、重要な情報を取得される脆弱性が存在します。 CVE-2009-4295 41726 CVE-2009-4295 51418 7.8 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-006532.html 2009-12-08 2012-12-20 View