Vulnerability Details : CVE-2009-2491
The utaudiod daemon in Sun Ray Server Software (SRSS) 4.0, when Solaris Trusted Extensions is enabled, allows local users to access the sessions of arbitrary users via unknown vectors related to "resource leaks."
Exploit prediction scoring system (EPSS) score for CVE-2009-2491
Probability of exploitation activity in the next 30 days: 0.04%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 11 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2009-2491
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
|---|---|---|---|---|---|
|
4.4
|
MEDIUM | AV:L/AC:M/Au:N/C:P/I:P/A:P |
3.4
|
6.4
|
NIST |
References for CVE-2009-2491
Products affected by CVE-2009-2491
- cpe:2.3:a:sun:ray_server_software:4.0:*:*:*:*:*:*:*
- cpe:2.3:a:sun:ray_server_software:4.0:*:sparc:*:*:*:*:*
- cpe:2.3:a:sun:ray_server_software:4.0:*:x86:*:*:*:*:*