NVD

Id
54781  
Name
CVE-2007-2617  
Description
srsexec in Sun Remote Services (SRS) Net Connect Software Proxy Core package in Sun Solaris 10 does not enforce file permissions when opening files, which allows local users to read the first line of arbitrary files via the -d and -v options.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2007-05-11  
Modified Date
2011-03-07  
Seq
2007-2617  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
278076 54781 CVE-2007-2617 20070510 Sun Microsystems Solaris SRS Proxy Core srsexec Arbitrary File Read Vulnerability  View
278077 54781 CVE-2007-2617 oval:org.mitre.oval:def:1920  View
278078 54781 CVE-2007-2617 102891  View
278079 54781 CVE-2007-2617 23915  View
278080 54781 CVE-2007-2617 1018046  View
278081 54781 CVE-2007-2617 ADV-2007-1769  View
278082 54781 CVE-2007-2617 sunsrs-srsexec-information-disclosure(34223)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
56862 JVNDB-2007-005554 Sun Solaris の SRS Net Connect Software Proxy Core パッケージにおける任意のファイルの最初の行を読まれる脆弱性 Sun Solaris の Sun Remote Services (SRS) Net Connect Software Proxy Core パッケージの srsexec は、ファイルを開く際、ファイルパーミッションを実施しないため、任意のファイルの最初の行を読まれる脆弱性が存在します。 CVE-2007-2617 25972 CVE-2007-2617 54781 2.1 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005554.html 2007-05-11 2012-12-20 View