Note: This is an archival copy of Security Sun Alert 274590 as previously published on http://sunsolve.sun.com.|
Latest version of this security advisory is available from http://support.oracle.com as Sun Alert 1021732.1.
Sun Ray Server Software 4.0
Sun Ray Server Software 4.1
Sun Ray Server Software 4.2
Date of Resolved Release
This Alert covers CVE-2010-0888 for the Device Services component of the Sun Ray Server Software product.
CVE-2010-0888 can be found at http://cve.mitre.org/cgi-bin/cvename.cgi?name=2010-0888
Please see http://www.oracle.com/technology/deploy/security/alerts.htm for more information about Critical Patch Updates and Security Alerts. This publication relates to the CPU for April 2010.
2. Contributing Factors
This issue can occur in the following releases:
1. Previous versions of Sun Ray Server Software are not affected by this issue.
2. To determine the version of the Sun Ray Server Software on a Solaris system, the following command can be run:
$ /usr/bin/pkgparam SUNWuto VERSION3. To determine the version of the Sun Ray Server Software on a Linux system, the following command can be run:
$ /bin/rpm -q SUNWuto4. This issue only affects servers which have the Device Services enabled. To determine if Device Services is enabled on a server, the following can be used:
Sun Ray Device Service Status3. Symptoms
This issue is addressed in the following releases:
This solution has no attachment