CVE-2006-3159 pipe_master in Sun ONE/iPlanet Messaging Server 5.2 HotFix 1.16 (built May 14 2003) allows local users to read portions of restricted files via a symlink attack on msg.conf in a directory identified b...
LowCVSS 2.1
EPSS 0.34%
- Published
- Updated
- Exploit status
- No public exploit known
Description
pipe_master in Sun ONE/iPlanet Messaging Server 5.2 HotFix 1.16 (built May 14 2003) allows local users to read portions of restricted files via a symlink attack on msg.conf in a directory identified by the CONFIGROOT environment variable, which returns the first line of the file in an error message.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sun iplanet messaging server | = 5.2 | No fix listed |
| sun one messaging server | = 5.2 | No fix listed |
References
- 20060614 Sun iPlanet Messaging Server 5.2 root password compromise mailing-list
- 20919 third-party-advisory
- 1016312 vdb-entry
- 1016416 vdb-entry
- 102496 vendor-advisory
- 18749 vdb-entry
- ADV-2006-2633 vdb-entry
- iplanet-msgconf-symlink(27220) vdb-entry