CVE-2007-2617

LOW 2.1CVE-2007-2617 · Published 11/05/2007 · updated 16/06/2026

In short

CVE-2007-2617 is a LOW (CVSS 2.1) vulnerability affecting net connect software (sun).
Chance of exploitation in the next 30 days (EPSS): 3.8%, higher than 90.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
net connect software sun	`= 3.2.3= 3.2.4`	No fix yet

Description

srsexec in Sun Remote Services (SRS) Net Connect Software Proxy Core package in Sun Solaris 10 does not enforce file permissions when opening files, which allows local users to read the first line of arbitrary files via the -d and -v options.

References

labs.idefense.com/intelligence/vulnerabilities/display.php
osvdb.org/35940
secunia.com/advisories/25194 · Vendor Advisory
sunsolve.sun.com/search/document.do · Patch
securityfocus.com/bid/23915 · Patch
securitytracker.com/id
vupen.com/english/advisories/2007/1769
exchange.xforce.ibmcloud.com/vulnerabilities/34223
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1920

More vulnerabilities in net connect software

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free