Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
pipe_master in Sun ONE/iPlanet Messaging Server 5.2 HotFix 1.16 (built May 14 2003) allows local users to read portions of restricted files via a symlink attack on msg.conf in a directory identified by the CONFIGROOT environment variable, which returns the first line of the file in an error message.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Sun iPlanet/Java Messaging Server pipe_master 访问验证漏洞
Vulnerability Description
Sun iPlanet/Java Messaging Server是Sun公司为企业电子邮件的需要和使用开放式Internet标准的各种规模的邮件主机提供的解决方案。 Sun iPlanet/Java Messaging Server实现上存在访问验证漏洞,本地攻击者可能利用此漏洞从系统上的任意文件读取某些数据,从而导致敏感信息泄露。 本地攻击者可以创建名为‘msg.conf’符号链接到正常情况下无权限读取的文件,攻击者可以以此读取文件的部分内容。
CVSS Information
N/A
Vulnerability Type
N/A