2007-01-25 00:00:00
mitre
PUBLISHED
cgi-bin/main in Sun Ray Server Software 2.0 and 3.0 before 20070123 allows local users to obtain the utadmin password by reading a web servers log file, or by conducting a different, unspecified local attack.