File Permission Weakness in Sun Solaris 10 by Sun Microsystems
CVE-2007-2617

Currently unrated

Key Information:

Vendor

Oracle
Status
Net Connect Software
Vendor
CVE Published:
11 May 2007

What is CVE-2007-2617?

The Sun Remote Services (SRS) Net Connect Software Proxy Core package in Sun Solaris 10 contains a vulnerability whereby the srsexec command does not properly enforce file permissions. This oversight allows local users to exploit the -d and -v options to read the first line of any arbitrary file on the system, potentially exposing sensitive information and leading to information disclosure risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://oval.cisecurity.org/repository/search/definition/...
vdb-entrysignaturex_refsource_OVAL
http://osvdb.org/35940
vdb-entryx_refsource_OSVDB
http://www.securitytracker.com/id?1018046
vdb-entryx_refsource_SECTRACK

EPSS Score

10% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.