CVE-2007-2617 json
srsexec in Sun Remote Services (SRS) Net Connect Software Proxy Core package in Sun Solaris 10 does not enforce file permissions when openi…
published 2007-05-11 19 y ago modified 2026-06-16 4 mo ago also EUVD-2007-2610
- cvss
- 2.1
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 3.8%
- EPSS 3.8% chance of exploitation in 30 days, percentile 90%
- public exploits
- 2
- Metasploit, Exploit-DB
Summary
srsexec in Sun Remote Services (SRS) Net Connect Software Proxy Core package in Sun Solaris 10 does not enforce file permissions when opening files, which allows local users to read the first line of arbitrary files via the -d and -v options.
Patch / fix
Timeline
- First public exploit (Metasploit post/solaris/escalate/srsexec_readline)
- Published
Exploit prediction
3.80% chance of exploitation in the next 30 days, higher than 90% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- Metasploit post/solaris/escalate/srsexec_readline Solaris srsexec Arbitrary File Reader metasploit post, normal rank, 2007-05-07
- EDB-30021 Sun Microsystems Solaris SRSEXEC 3.2.x - Arbitrary File Read Local Information Disclosure local, 2007-05-10
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 2.1 | AV:L/AC:L/Au:N/C:P/I:N/A:N |
References
-
sunsolve.sun.com
/search/document.do?assetkey=1-26-102891-1
vendor-advisory, patch
-
securityfocus.com
/bid/23915
vdb-entry, patch
-
secunia.com
/advisories/25194
third-party-advisory, vendor-advisory
-
oval.cisecurity.org
/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1920
vdb-entry, signature
-
osvdb.org
/35940
vdb-entry
-
securitytracker.com
/id?1018046
vdb-entry
-
exchange.xforce.ibmcloud.com
/vulnerabilities/34223
vdb-entry
-
vupen.com
/english/advisories/2007/1769
vdb-entry
-
labs.idefense.com
/intelligence/vulnerabilities/display.php?id=531
third-party-advisory
Sources
- CVE List CVE-2007-2617
- NVD CVE-2007-2617
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.