Sun Ray Server Software 4.0 and 4.1 does not generate a unique DSA private key for the firmware on each Sun Ray 1, 1g, 100, and 150 DTU device, which makes it easier for remote attackers to obtain sensitive information by predicting a key and then using it to decrypt sniffed network traffic.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2009-12-11T16:00:00Z
Updated: 2024-09-17T01:52:00.996Z
Reserved: 2009-12-11T00:00:00Z
Link: CVE-2009-4295
Vulnrichment
No data.
NVD
Status : Modified
Published: 2009-12-11T16:30:00.407
Modified: 2024-11-21T01:09:18.253
Link: CVE-2009-4295
Redhat
No data.