CVEvulnerability
CVE-2009-3923
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-11-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-287
Description
The VirtualBox 2.0.8 and 2.0.10 web service in Sun Virtual Desktop Infrastructure (VDI) 3.0 does not require authentication, which allows remote attackers to obtain unspecified access via vectors involving requests to an Apache HTTP Server.
Affected configurations
• sun virtual desktop infrastructure 3.0
• sun virtualbox 2.0.8
• sun virtualbox 2.0.10
Related
Weakness · CWE (1)
- CWE-287 Improper Authentication weakness
References
- http://sunsolve.sun.com/search/document.do?assetkey=1-21-141481-03-1 Patch, Vendor Advisory
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-268328-1 sunsolve.sun.com
- http://www.securityfocus.com/bid/36917 Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/54136 exchange.xforce.ibmcloud.com
- http://sunsolve.sun.com/search/document.do?assetkey=1-21-141481-03-1 Patch, Vendor Advisory
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-268328-1 sunsolve.sun.com
- http://www.securityfocus.com/bid/36917 Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/54136 exchange.xforce.ibmcloud.com