CVE-2007-2617: Sun Net Connect Software

Low severity, CVSS 2.1. EPSS: 3.8% chance of exploitation in the next 30 days.

srsexec in Sun Remote Services (SRS) Net Connect Software Proxy Core package in Sun Solaris 10 does not enforce file permissions when opening files, which allows local users to read the first line of arbitrary files via the -d and -v options.

Affected products

• Sun Net Connect Software: version 3.2.3 only; version 3.2.4 only

Published 2007-05-11. Last modified 2026-06-16.