CVE-2007-3880

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-11-14 · updated 2026-06-16
Weakness: CWE-134

Description

Format string vulnerability in srsexec in Sun Remote Services (SRS) Net Connect 3.2.3 and 3.2.4, as distributed in the SRS Proxy Core (SUNWsrspx) package, allows local users to gain privileges via format string specifiers in unspecified input that is logged through syslog.

Affected products

Sun Net Connect Software: 3.2.3, 3.2.4

References

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=610
http://osvdb.org/40836
http://secunia.com/advisories/27512
http://sunsolve.sun.com/search/document.do?assetkey=1-26-103119-1
http://sunsolve.sun.com/search/document.do?assetkey=1-66-200581-1
http://www.securityfocus.com/bid/26313
http://www.securitytracker.com/id?1018893
http://www.vupen.com/english/advisories/2007/3711
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=610
http://osvdb.org/40836
http://secunia.com/advisories/27512
http://sunsolve.sun.com/search/document.do?assetkey=1-26-103119-1

Get alerted when CVE-2007-3880 or the next vulnerability affects your stack