CVE-2009-2491: Sun Ray Server Software

Medium severity, CVSS 4.4. EPSS: 0.3% chance of exploitation in the next 30 days.

The utaudiod daemon in Sun Ray Server Software (SRSS) 4.0, when Solaris Trusted Extensions is enabled, allows local users to access the sessions of arbitrary users via unknown vectors related to "resource leaks."

Affected products

• Sun Ray Server Software: version 4.0 only

Published 2009-07-16. Last modified 2026-06-16.