TI-2006-03924 Aliases CVE-2006-4049 GHSA-gmvc-5g7r-xxcq

Unspecified vulnerability in the utxconfig utility in Sun Ray Server Software 3.x allows…

LOW 11Published 2006-08-09 · Updated 2024-08-07

Key facts

Attack vector: Local
Privileges required: None
User interaction: — Not recorded in CVSS 2.0
Attack complexity: Low
Impact type: —
Confidentiality · integrity · availability: None · Partial · None
Fix status: No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

Unspecified vulnerability in the utxconfig utility in Sun Ray Server Software 3.x allows local users to create or overwrite arbitrary files via unknown attack vectors.

Why it matters now

EPSS 0.00388 33rd percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	—	all versions	—	No fix listed	CNA

— Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:sun:ray_server_software:3.0:::::::*	3.0	Vulnerable	Sun

cpe:2.3:a:sun:ray_server_software:3.0:*:*:*:*:*:*:* Versions 3.0 Vulnerable ·Sun

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2006-4049
2026-10-03 Alias added: GHSA-gmvc-5g7r-xxcq

References

Advisory 1

101924

Other 1

ADV-2006-3226

TI-2009-04057 Unspecified vulnerability in the Authentication Manager (aka utauthd) in Sun Ray Server… CVSS 2.0HIGH 10.0
TI-2008-02031 Unspecified vulnerability in Sun Ray Kiosk Mode 4.0 allows local and remote authenticated… CVSS 2.0HIGH 8.5
TI-2007-06179 Unspecified vulnerability in the Device Manager daemon (utdevmgrd) in Sun Ray Server… CVSS 2.0HIGH 7.8
TI-2008-05162 Sun Sun Ray Server Software 3.1 through 4.0 does not properly restrict access, which… CVSS 2.0HIGH 7.5
TI-2009-04058 Sun Ray Server Software 4.0 and 4.1 does not generate a unique DSA private key for the… CVSS 2.0HIGH 7.8
TI-2002-01955 Sun Ray Server Software (SRSS) 1.3, when Non-Smartcard Mobility (NSCM) is enabled, allows… CVSS 2.0HIGH 7.5

See all 14 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences