CVE-2006-3159: Sun Iplanet Messaging Server

Low severity, CVSS 2.1. EPSS: 0.3% chance of exploitation in the next 30 days.

pipe_master in Sun ONE/iPlanet Messaging Server 5.2 HotFix 1.16 (built May 14 2003) allows local users to read portions of restricted files via a symlink attack on msg.conf in a directory identified by the CONFIGROOT environment variable, which returns the first line of the file in an error message.

Affected products

• Sun Iplanet Messaging Server: version 5.2 only
• Sun One Messaging Server: version 5.2 only

Published 2006-06-22. Last modified 2026-06-16.