Sun Net Connect Software vulnerabilities

2 CVEs affecting Sun Net Connect Software, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2007-3880, published 2007-11-14.

More from Sun.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2007-2617, published 2007-05-11. Low severity, CVSS 2.1. EPSS: 3.8% chance of exploitation in the next 30 days. srsexec in Sun Remote Services (SRS) Net Connect Software Proxy Core package in Sun Solaris 10 does not enforce file permissions when opening files, which allows local users to read the first line of…
• CVE-2007-3880, published 2007-11-14. High severity, CVSS 7.2. EPSS: 0.3% chance of exploitation in the next 30 days. Format string vulnerability in srsexec in Sun Remote Services (SRS) Net Connect 3.2.3 and 3.2.4, as distributed in the SRS Proxy Core (SUNWsrspx) package, allows local users to gain privileges via…