Approved changes feed: RSS · Atom

cpe:2.3:a:sun:virtual_desktop_infrastructure:3.0:*:*:*:*:*:*:*

part: a version: 3.0 update: *

VendorSun (f793a52f-9733-5503-ba70-29fa391cdd2b)
ProductVirtual Desktop Infrastructure (c01c2dcb-da98-569b-b46b-589aa563ab04)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-3923 vulnerable 2026-06-08 04:51:45.293326 Details available
The VirtualBox 2.0.8 and 2.0.10 web service in Sun Virtual Desktop Infrastructure (VDI) 3.0 does not require authentication, which allows remote attackers to obtain unspecified access via vectors involving requests to an Apache HTTP Server.
Published: 2009-11-10T00:00:00.000Z
Updated: 2024-08-07T06:45:50.449Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2856 vulnerable 2026-06-08 04:51:30.881479 Details available
Sun Virtual Desktop Infrastructure (VDI) 3.0, when anonymous binding is enabled, does not properly handle a client's attempt to establish an authenticated and encrypted connection, which might allow remote attackers to read cleartext VDI configuration-data requests by sniffing LDAP sessions on the network.
Published: 2009-08-18T22:00:00.000Z
Updated: 2024-09-16T22:51:15.490Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.