VulnerabilityModified
CVE-2007-2617
srsexec in Sun Remote Services (SRS) Net Connect Software Proxy Core package in Sun Solaris 10 does not enforce file permissions when opening files, which allows local users to read the first line of arbitrary files via the -d and -v options.
LOW 2.1EPSS 3.80%
Does this matter?
Lower severity and a low EPSS score (3.80%). Track it; it rarely justifies an emergency change on its own.
Description
srsexec in Sun Remote Services (SRS) Net Connect Software Proxy Core package in Sun Solaris 10 does not enforce file permissions when opening files, which allows local users to read the first line of arbitrary files via the -d and -v options.
- CVSS 2.0
- 2.1 LOWAV:L/AC:L/Au:N/C:P/I:N/A:N
- EPSS
- 3.80% probability · 89th percentile
- CISA KEV
- Not listed
- Affected
- sun/net connect software
- Source
- cve@mitre.org
References
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=531
- http://osvdb.org/35940
- http://secunia.com/advisories/25194Vendor Advisory
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-102891-1Patch
- http://www.securityfocus.com/bid/23915Patch
- http://www.securitytracker.com/id?1018046
- http://www.vupen.com/english/advisories/2007/1769
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34223
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1920
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=531
- http://osvdb.org/35940
- http://secunia.com/advisories/25194Vendor Advisory
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-102891-1Patch
- http://www.securityfocus.com/bid/23915Patch
- http://www.securitytracker.com/id?1018046
- http://www.vupen.com/english/advisories/2007/1769
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34223
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1920
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.