vulnwire
6.9med

CVE-2007-3717

rcp on Sun Solaris 8, 9, and 10 before 20070710 does not properly call certain helper applications, which allows local users to gain privil…

Published 19 y ago · modified 4 mo ago · JSON

CVSS
6.9
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.3%
percentile 26%
Public exploits
0
none known

rcp on Sun Solaris 8, 9, and 10 before 20070710 does not properly call certain helper applications, which allows local users to gain privileges by creating files with certain names, possibly containing shell metacharacters or spaces, a similar issue to CVE-2006-0225.

Exploit prediction (EPSS)

0.33% probability of exploitation in the next 30 days, higher than 26% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD2.06.9AV:L/AC:M/Au:N/C:C/I:C/A:C

References

  • osvdb.org /36611 · vdb-entry, x_refsource_OSVDB, x_transferred
  • secunia.com /advisories/26024 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1772 · vdb-entry, signature, x_refsource_OVAL, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/35334 · vdb-entry, x_refsource_XF, x_transferred
  • vupen.com /english/advisories/2007/2494 · vdb-entry, x_refsource_VUPEN, x_transferred
  • secunia.com /advisories/26210 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • sunsolve.sun.com /search/document.do?assetkey=1-26-102978-1 · vendor-advisory, x_refsource_SUNALERT, x_transferred
  • support.avaya.com /elmodocs2/security/ASA-2007-319.htm · x_refsource_CONFIRM, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.