CVE-2002-2036: Sun Ray Server Software

High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days.

Sun Ray Server Software (SRSS) 1.3, when Non-Smartcard Mobility (NSCM) is enabled, allows remote attackers to login as another user by running dtlogin from a system that supports the XDMCP client.

Affected products

• Sun Ray Server Software: version 1.3 only

Published 2002-12-31. Last modified 2026-06-16.