Back to search
CVE-2007-5225
Published: Oct 5, 2007
Modified: Aug 7, 2024
PUBLISHED
Description
Integer signedness error in FIFO filesystems (named pipes) on Sun Solaris 8 through 10 allows local users to read the contents of unspecified memory locations via a negative maximum length value to the I_PEEK ioctl.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
20071004 Re: iDefense Security Advisory 10.02.07: Sun Microsystems Solaris FIFO FS Information Disclosure Vulnerability
mailing-list
x_refsource_BUGTRAQ
27654
third-party-advisory
x_refsource_SECUNIA
5227
exploit
x_refsource_EXPLOIT-DB
27024
third-party-advisory
x_refsource_SECUNIA
http://support.avaya.com/elmodocs2/security/ASA-2007-463.htm
x_refsource_CONFIRM
25905
vdb-entry
x_refsource_BID
ADV-2007-3339
vdb-entry
x_refsource_VUPEN
solaris-namedpipes-information-disclosure(36918)
vdb-entry
x_refsource_XF
4516
exploit
x_refsource_EXPLOIT-DB
oval:org.mitre.oval:def:2170
vdb-entry
signature
x_refsource_OVAL
103061
vendor-advisory
x_refsource_SUNALERT
1018766
vdb-entry
x_refsource_SECTRACK
20071002 Sun Microsystems Solaris FIFO FS Information Disclosure Vulnerability
third-party-advisory
x_refsource_IDEFENSE
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now