Description
Format string vulnerability in srsexec in Sun Remote Services (SRS) Net Connect 3.2.3 and 3.2.4, as distributed in the SRS Proxy Core (SUNWsrspx) package, allows local users to gain privileges via format string specifiers in unspecified input that is logged through syslog.
References
- 103119 vendor-advisory
- 40836 vdb-entry
- 1018893 vdb-entry
- 26313 vdb-entry
- ADV-2007-3711 vdb-entry
- 27512 third-party-advisory
- 200581 vendor-advisory
- 20071102 Sun Microsystems Solaris srsexec Format String Vulnerability third-party-advisory