Note: This is an archival copy of Security Sun Alert 200772 as previously published on http://sunsolve.sun.com.
Latest version of this security advisory is available from http://support.oracle.com as Sun Alert 1000590.1.
Article ID : 1000590.1
Article Type : Sun Alerts (SURE)
Last reviewed : 2010-01-19
Audience : PUBLIC
Copyright Notice: Copyright © 2010, Oracle Corporation and/or its affiliates.

Quick Removal of a Sun Ray Smartcard May Leave Desktop Session Open

Category
Security

Release Phase
Resolved

Bug Id
4433854

Date of Workaround Release
28-APR-2003

Date of Resolved Release
18-JUL-2003

removal of a Smartcard in the Sun Ray Smartcard ...

1. Impact

On rare occasions, quick removal, reinsertion and removal of a Smartcard in the Sun Ray Smartcard reader may cause the associated session (login) to remain connected to the Desk Top Unit (DTU) even after the card has been removed.


2. Contributing Factors

This issue can occur in the following releases:

SPARC Platform

  • Sun Ray Server Software (SRSS) Version 1.3 for Solaris 2.6, 7 and 8 without patch 111891-09
  • Sun Ray Server Software (SRSS) Version 2.0 without patch 114880-01

If you need to determine the version of SRSS on your system, run the following command: 

    % pkginfo -x SUNWuto

Notes:

SRSS is not supported on the x86 platform.

This is a Sun Ray firmware bug and is not specific to any version of Solaris.


3. Symptoms

On occurence, Smartcard removal from a Desk Top Unit (e.g. Sun Ray) is not recognized: the Desk Top Unit's screen continues to display the associated session and the login session remains open.


4. Workaround

After removal of the Smartcard, make sure that the session associated with the Smartcard is not displayed on the screen.


5. Resolution

This issue is addressed in the following releases:

SPARC Platform

  • Sun Ray Server Software (SRSS) Version 1.3 for Solaris 2.6, 7 and 8 with patch 111891-09
  • Sun Ray Server Software (SRSS) Version 2.0 with patch 114880-01

Change History

18-Jul-2003

  • Updated Contributing Factors and Resolution sections
  • State: changed to Resolved
  • Distribution changed for Public Sunsolve

13-Jun-2003

  • Updated Contributing Factors and Resolution sections

This Sun Alert notification is being provided to you on an "AS IS" basis. This Sun Alert notification may contain information provided by third parties. The issues described in this Sun Alert notification may or may not impact your system(s). Sun makes no representations, warranties, or guarantees as to the information contained herein. ANY AND ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT, ARE HEREBY DISCLAIMED. BY ACCESSING THIS DOCUMENT YOU ACKNOWLEDGE THAT SUN SHALL IN NO EVENT BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, PUNITIVE, OR CONSEQUENTIAL DAMAGES THAT ARISE OUT OF YOUR USE OR FAILURE TO USE THE INFORMATION CONTAINED HEREIN. This Sun Alert notification contains Sun proprietary and confidential information. It is being provided to you pursuant to the provisions of your agreement to purchase services from Sun, or, if you do not have such an agreement, the Sun.com Terms of Use. This Sun Alert notification may only be used for the purposes contemplated by these agreements.

Copyright 2000-2010 Sun Microsystems, Inc., 4150 Network Circle, Santa Clara, CA 95054 U.S.A. All rights reserved.


Product
Sun Ray Server Software 2.0

References

111891-09
114880-01




Attachments
This solution has no attachment