CVEvulnerability
CVE-2007-3880
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-11-14
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-134
Description
Format string vulnerability in srsexec in Sun Remote Services (SRS) Net Connect 3.2.3 and 3.2.4, as distributed in the SRS Proxy Core (SUNWsrspx) package, allows local users to gain privileges via format string specifiers in unspecified input that is logged through syslog.
Affected configurations
• sun net connect software 3.2.3
• sun net connect software 3.2.4
Related
Weakness · CWE (1)
- CWE-134 Use of Externally-Controlled Format String weakness
References
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=610 labs.idefense.com
- http://osvdb.org/40836 osvdb.org
- http://secunia.com/advisories/27512 Patch, Vendor Advisory
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-103119-1 Patch
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-200581-1 sunsolve.sun.com
- http://www.securityfocus.com/bid/26313 Patch
- http://www.securitytracker.com/id?1018893 www.securitytracker.com
- http://www.vupen.com/english/advisories/2007/3711 www.vupen.com
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=610 labs.idefense.com
- http://osvdb.org/40836 osvdb.org
- http://secunia.com/advisories/27512 Patch, Vendor Advisory
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-103119-1 Patch
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-200581-1 sunsolve.sun.com
- http://www.securityfocus.com/bid/26313 Patch
- http://www.securitytracker.com/id?1018893 www.securitytracker.com
- http://www.vupen.com/english/advisories/2007/3711 www.vupen.com