VULNERABILITY INTELLIGENCE
CVE-2007-2617
CVSS score2.1 LOW
EPSS probability3.80%
CISA KEVNot currently listed
Published2007-05-11
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:P/I:N/A:N
Description
srsexec in Sun Remote Services (SRS) Net Connect Software Proxy Core package in Sun Solaris 10 does not enforce file permissions when opening files, which allows local users to read the first line of arbitrary files via the -d and -v options.