CVE-2007-3880

Currently unrated

Key Information:

Vendor
Oracle
Status
Net Connect Software
Vendor
CVE Published:
14 November 2007

Summary

Format string vulnerability in srsexec in Sun Remote Services (SRS) Net Connect 3.2.3 and 3.2.4, as distributed in the SRS Proxy Core (SUNWsrspx) package, allows local users to gain privileges via format string specifiers in unspecified input that is logged through syslog.

References

http://sunsolve.sun.com/search/document.do?assetkey=1-26-...
vendor-advisoryx_refsource_SUNALERT
http://osvdb.org/40836
vdb-entryx_refsource_OSVDB
http://www.securitytracker.com/id?1018893
vdb-entryx_refsource_SECTRACK

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.