NVD

Id
57301  
Name
CVE-2007-5225  
Description
Integer signedness error in FIFO filesystems (named pipes) on Sun Solaris 8 through 10 allows local users to read the contents of unspecified memory locations via a negative maximum length value to the I_PEEK ioctl.  
Reject
 
CVSS Version
2  
CVSS Score
4.9  
Severity
Medium  
CVSS Base Score
4.9  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:N/A:N)  
Pub Date
2017-01-07  
Published
2007-10-04  
Modified Date
2011-10-11  
Seq
2007-5225  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
292584 57301 CVE-2007-5225 20071002 Sun Microsystems Solaris FIFO FS Information Disclosure Vulnerability  View
292585 57301 CVE-2007-5225 oval:org.mitre.oval:def:2170  View
292586 57301 CVE-2007-5225 103061  View
292587 57301 CVE-2007-5225 http://support.avaya.com/elmodocs2/security/ASA-2007-463.htm  View
292588 57301 CVE-2007-5225 4516  View
292589 57301 CVE-2007-5225 5227  View
292590 57301 CVE-2007-5225 20071004 Re: iDefense Security Advisory 10.02.07: Sun Microsystems Solaris FIFO FS Information Disclosure Vulnerability  View
292591 57301 CVE-2007-5225 25905  View
292592 57301 CVE-2007-5225 1018766  View
292593 57301 CVE-2007-5225 ADV-2007-3339  View
292594 57301 CVE-2007-5225 solaris-namedpipes-information-disclosure(36918)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52073 JVNDB-2007-000736 Sun Solaris の FIFO ファイルシステムにおけるカーネルメモリへアクセス可能な脆弱性 Sun Solaris の FIFO ファイルシステム (名前つきパイプ) には、I_PEEK ioctl の負の値の取り扱いに不備が存在するために、ローカルのユーザがカーネルメモリへアクセス可能な脆弱性が存在します。 CVE-2007-5225 28580 CVE-2007-5225 57301 4.9 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000736.html 2007-10-02 2007-10-15 View