Executive Summary
| Informations | |||
|---|---|---|---|
| Name | CVE-2007-2617 | First vendor Publication | 2007-05-11 |
| Vendor | Cve | Last vendor Modification | 2024-11-21 |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:L/AC:L/Au:N/C:P/I:N/A:N) | |||
|---|---|---|---|
| Cvss Base Score | 2.1 | Attack Range | Local |
| Cvss Impact Score | 2.9 | Attack Complexity | Low |
| Cvss Expoit Score | 3.9 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| srsexec in Sun Remote Services (SRS) Net Connect Software Proxy Core package in Sun Solaris 10 does not enforce file permissions when opening files, which allows local users to read the first line of arbitrary files via the -d and -v options. |
Original Source
| Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2617 |
OVAL Definitions
| Definition Id: oval:org.mitre.oval:def:1920 | |||
| Oval ID: | oval:org.mitre.oval:def:1920 | ||
| Title: | Security Vulnerability in Sun Remote Services (SRS) Net Connect Software | ||
| Description: | srsexec in Sun Remote Services (SRS) Net Connect Software Proxy Core package in Sun Solaris 10 does not enforce file permissions when opening files, which allows local users to read the first line of arbitrary files via the -d and -v options. | ||
| Family: | unix | Class: | vulnerability |
| Reference(s): | CVE-2007-2617 | Version: | 1 |
| Platform(s): | Sun Solaris 8 Sun Solaris 9 Sun Solaris 10 | Product(s): | |
| Definition Synopsis: | |||
| |||
CPE : Common Platform Enumeration
| Type | Description | Count |
|---|---|---|
| Application | 2 |
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 35940 | Solaris Net Connect Software Proxy Core SRS srsexec Local File Portion Disclo... |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2007-05-20 | Name : The remote host is missing Sun Security Patch number 123870-05 File : solaris10_123870.nasl - Type : ACT_GATHER_INFO |
| 2007-05-20 | Name : The remote host is missing Sun Security Patch number 123870-05 File : solaris8_123870.nasl - Type : ACT_GATHER_INFO |
| 2007-05-20 | Name : The remote host is missing Sun Security Patch number 123870-05 File : solaris9_123870.nasl - Type : ACT_GATHER_INFO |
Sources (Detail)
Alert History
| Date | Informations |
|---|---|
| 2024-11-28 23:17:23 |
|
| 2024-11-28 12:12:19 |
|
| 2020-05-23 13:16:48 |
|
| 2020-05-23 00:19:46 |
|
| 2017-10-11 09:23:57 |
|
| 2017-07-29 12:02:14 |
|
| 2016-06-28 16:28:47 |
|
| 2016-04-26 16:07:29 |
|
| 2014-02-17 10:40:10 |
|
| 2013-05-11 10:25:37 |
|
