• info
• discussion
• exploit
• solution
• references

Sun Ray UTXConfig Local Arbitrary File Overwrite Vulnerability

Solution:
The vendor has released an advisory and patches to address this issue.


Sun Ray Server Software 3.1

• Sun 120879-01
  SPARC for Solaris 8, 9 and 10
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -120879-01-1


• Sun 120880-01
  x86 for Solaris 8, 9 and 10
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -120880-01-1


• Sun 120881-01
  Linux platform
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -120881-01-1

Sun Ray Server Software 3.0

• Sun 118979-02
  Solaris 8 and 9 on SPARC
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -118979-02-1


• Sun 119836-02
  Linux Platform
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -119836-02-1