7.2

CVE-2007-3880

Format string vulnerability in srsexec in Sun Remote Services (SRS) Net Connect 3.2.3 and 3.2.4, as distributed in the SRS Proxy Core (SUNWsrspx) package, allows local users to gain privileges via format string specifiers in unspecified input that is logged through syslog.

Data is provided by the National Vulnerability Database (NVD)
Sun ≫ Net Connect Software Version3.2.3
   Sun ≫ Sunos Version5.8
   Sun ≫ Sunos Version5.9
   Sun ≫ Sunos Version5.10
Sun ≫ Net Connect Software Version3.2.4
   Sun ≫ Sunos Version5.8
   Sun ≫ Sunos Version5.9
   Sun ≫ Sunos Version5.10
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.05% 0.132
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
CWE-134 Use of Externally-Controlled Format String

The product uses a function that accepts a format string as an argument, but the format string originates from an external source.