CVE-2007-5225: Medium severity Sun SunOS vulnerability
Published Oct 5, 2007
·Updated
Integer signedness error in FIFO filesystems (named pipes) on Sun Solaris 8 through 10 allows local users to read the contents of unspecified memory locations via a negative maximum length value to the IPEEK ioctl.
Affected Software
3 affected components
Sun SunOS=5.8
Sun SunOS=5.10
Sun SunOS=5.9
Event History
Oct 5, 2007
CVE Published
12:17 AM
CVE Published
via MITRE·04:00 AM
Data Sourced
via MITRE·04:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-5225?
CVE-2007-5225 is rated as medium severity due to its potential to expose sensitive memory contents.
2
How do I fix CVE-2007-5225?
Fixing CVE-2007-5225 requires applying security patches provided by Sun Microsystems for affected versions of SunOS.
3
Who is affected by CVE-2007-5225?
Local users on Sun Solaris 8 through 10 are affected by CVE-2007-5225.
4
What systems are vulnerable to CVE-2007-5225?
The vulnerable systems include Sun Solaris versions 5.8, 5.9, and 5.10.
5
What type of attack does CVE-2007-5225 facilitate?
CVE-2007-5225 can facilitate a local privilege escalation attack by allowing users to access restricted memory regions.