CVE-2007-2617

srsexec in Sun Remote Services (SRS) Net Connect Software Proxy Core package in Sun Solaris 10 does not enforce file permissions when opening files, which allows local users to read the first line of arbitrary files via the -d and -v options.

Link	Resource
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=531
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102891-1	Patch
http://www.securityfocus.com/bid/23915	Patch
http://secunia.com/advisories/25194	Vendor Advisory
http://www.securitytracker.com/id?1018046
http://osvdb.org/35940
http://www.vupen.com/english/advisories/2007/1769
https://exchange.xforce.ibmcloud.com/vulnerabilities/34223
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1920

Configuration 1

---

Published : 2007-05-11 04:19

Updated : 2017-10-11 01:32

---

NVD link : CVE-2007-2617

Mitre link : CVE-2007-2617

No products.

NVD-CWE-Other