Vulnerabilities > CVE-2006-3159 - Local Information Disclosure vulnerability in SUN Iplanet Messaging Server and ONE Messaging Server

047910
CVSS 2.1 - LOW
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
local
low complexity
sun
NVD
Published: 2006-06-22
Updated: 2017-07-20

Summary

pipe_master in Sun ONE/iPlanet Messaging Server 5.2 HotFix 1.16 (built May 14 2003) allows local users to read portions of restricted files via a symlink attack on msg.conf in a directory identified by the CONFIGROOT environment variable, which returns the first line of the file in an error message.

Vulnerable Configurations

Part Description Count
Application
Sun
2

References