CVE-2006-3159: Low severity Sun iPlanet Messaging Server vulnerability
pipemaster in Sun ONE/iPlanet Messaging Server 5.2 HotFix 1.16 (built May 14 2003) allows local users to read portions of restricted files via a symlink attack on msg.conf in a directory identified by the CONFIGROOT environment variable, which returns the first line of the file in an error message.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-3159?
CVE-2006-3159 is considered a moderate severity vulnerability due to its potential for exposing restricted file information to local users.
How do I fix CVE-2006-3159?
To fix CVE-2006-3159, ensure that improper symlinks are not used by restricting access permissions to sensitive files and reviewing the CONFIGROOT variable settings.
What types of systems are affected by CVE-2006-3159?
CVE-2006-3159 affects Sun ONE/iPlanet Messaging Server and Sun iPlanet Messaging Server version 5.2.
What is the impact of exploiting CVE-2006-3159?
Exploitation of CVE-2006-3159 can allow local users to read portions of restricted files, potentially leading to information disclosure.
Can CVE-2006-3159 be remotely exploited?
CVE-2006-3159 is not a remote vulnerability; it requires local access to the affected system to execute the symlink attack.