CVE-2007-2617
CVE-2007-2617 is a low-severity vulnerability in Sun Net Connect Software with a CVSS 2.0 base score of 2.1. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.
Key facts
- Severity: Low (CVSS 2.0 base score 2.1)
- EPSS exploit prediction: 4% (89th percentile)
- Actively exploited: Not listed in CISA KEV
- Affected product: Sun Net Connect Software
- Published:
- Last modified:
Description
srsexec in Sun Remote Services (SRS) Net Connect Software Proxy Core package in Sun Solaris 10 does not enforce file permissions when opening files, which allows local users to read the first line of arbitrary files via the -d and -v options.
Frequently asked questions
- What is CVE-2007-2617?
- srsexec in Sun Remote Services (SRS) Net Connect Software Proxy Core package in Sun Solaris 10 does not enforce file permissions when opening files, which allows local users to read the first line of arbitrary files via the -d and -v options.
- How severe is CVE-2007-2617?
- CVE-2007-2617 has a CVSS 2.0 base score of 2.1, rated low severity.
- Is CVE-2007-2617 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 4% (89th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2007-2617?
- CVE-2007-2617 primarily affects Sun Net Connect Software. In total, 2 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-2007-2617?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- When was CVE-2007-2617 published?
- CVE-2007-2617 was published on 2007-05-11 and last updated on 2026-06-16.
References
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=531
- http://osvdb.org/35940
- http://secunia.com/advisories/25194
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-102891-1
- http://www.securityfocus.com/bid/23915
- http://www.securitytracker.com/id?1018046
- http://www.vupen.com/english/advisories/2007/1769
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34223
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1920
Affected products (2)
- cpe:2.3:a:sun:net_connect_software:3.2.3:*:*:*:*:*:*:*
- cpe:2.3:a:sun:net_connect_software:3.2.4:*:*:*:*:*:*:*
More vulnerabilities in Sun Net Connect Software
- CVE-2007-3880 — High (CVSS 7.2): Format string vulnerability in srsexec in Sun Remote Services (SRS) Net Connect 3.2.3 and 3.2.4, as distributed in the…