CVE-2007-2617: Low severity Sun Solaris vulnerability
srsexec in Sun Remote Services (SRS) Net Connect Software Proxy Core package in Sun Solaris 10 does not enforce file permissions when opening files, which allows local users to read the first line of arbitrary files via the -d and -v options.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-2617?
CVE-2007-2617 is classified as a moderate severity vulnerability due to its potential impact on local user access to sensitive file data.
How do I fix CVE-2007-2617?
To mitigate CVE-2007-2617, ensure that you upgrade to the latest patched version of the Sun Remote Services Net Connect Software.
Who is affected by CVE-2007-2617?
CVE-2007-2617 affects users of Sun Remote Services Net Connect Software versions 3.2.3 and 3.2.4 running on Solaris 10.
What type of vulnerability is CVE-2007-2617?
CVE-2007-2617 is a local file permission vulnerability that allows unauthorized access to read the first line of arbitrary files.
Can CVE-2007-2617 be exploited remotely?
CVE-2007-2617 cannot be exploited remotely; it requires local access to the affected system to execute the exploit.