PRIOn knowledge basePRION:CVE-2007-3880Format string
6.8 Medium
AI Score
Confidence
Low
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.0005 Low
EPSS
Percentile
14.5%
Format string vulnerability in srsexec in Sun Remote Services (SRS) Net Connect 3.2.3 and 3.2.4, as distributed in the SRS Proxy Core (SUNWsrspx) package, allows local users to gain privileges via format string specifiers in unspecified input that is logged through syslog.
| CPE | Name | Operator | Version |
|---|---|---|---|
| net_connect_software | eq | 3.2.3 | |
| net_connect_software | eq | 3.2.4 |
References
labs.idefense.com/intelligence/vulnerabilities/display.php?id=610
osvdb.org/40836
secunia.com/advisories/27512
sunsolve.sun.com/search/document.do?assetkey=1-26-103119-1
sunsolve.sun.com/search/document.do?assetkey=1-66-200581-1
www.securityfocus.com/bid/26313
www.securitytracker.com/id?1018893
www.vupen.com/english/advisories/2007/3711
Related
6.8 Medium
AI Score
Confidence
Low
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.0005 Low
EPSS
Percentile
14.5%