CVE-2007-2617

srsexec in Sun Remote Services (SRS) Net Connect Software Proxy Core package in Sun Solaris 10 does not enforce file permissions when opening files, which allows local users to read the first line of arbitrary files via the -d and -v options.

CVSS v2.0

2.1 LOWAV:L/AC:L/Au:N/C:P/I:N/A:N

EPSS

3.80% chance of exploitation in the next 30 days, 89th percentile

Published

2007-05-11

Updated

2024-08-07

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/post/solaris/escalate/srsexec_readline.rb

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/30021

References

• CVE Record
• NVD entry

Related

• CVE-2007-2615
• CVE-2007-2620
• CVE-2007-2614
• CVE-2007-2621
• CVE-2007-2611
• CVE-2007-2622