Description
cgi-bin/main in Sun Ray Server Software 2.0 and 3.0 before 20070123 allows local users to obtain the utadmin password by reading a web server's log file, or by conducting a different, unspecified local attack.
References
- 102779 vendor-advisory
- 23900 third-party-advisory
- ADV-2007-0316 vdb-entry
- 1017547 vdb-entry
- 22192 vdb-entry
- sunray-utadmin-information-disclosure(31700) vdb-entry
- 31671 vdb-entry