cgi-bin/main in Sun Ray Server Software 2.0 and 3.0 before 20070123 allows local users to obtain the utadmin password by reading a web servers log file, or by conducting a different, unspecified local attack.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Ray_server_software | Sun | 2.0 (including) | 2.0 (including) |
Ray_server_software | Sun | 3.0 (including) | 3.0 (including) |