Sun Ray Server Software (SRSS) 1.3 and 2.0 for Solaris 2.6, 7 and 8 does not properly detect a smartcard removal when the card is quickly removed, reinserted, and removed again,...
Date: 2004-07
Affected: sun/ray_server_software
Attack vector: other
Category: vulnerability-disclosure
Severity: Medium
CVE: CVE-2004-0701
CVSS: 4.6 ()

Sun Ray Server Software (SRSS) 1.3 and 2.0 for Solaris 2.6, 7 and 8 does not properly detect a smartcard removal when the card is quickly removed, reinserted, and removed again, which could cause a user session to stay logged in and allow local users to gain unauthorized access.


Mitigations:

Architectural layers (MAESTRO):