CVE-2007-0392

IBM AIX 5.3 does not properly verify the status of file descriptors before setuid execution, which allows local users to gain privileges by closing file…

published January 19, 2007

CVSS
—
EPSS
0%
Percentile
28.3
In the wild
Unconfirmed
What it is

IBM AIX 5.3 does not properly verify the status of file descriptors before setuid execution, which allows local users to gain privileges by closing file descriptor 0, 1, or 2 and then invoking a setuid program, a variant of CVE-2002-0572.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00359 · 28.3th percentile
Published
2007-01-19T23:00Z
EPSS history
Timeline
  • 19 JAN 23:00Z
    IBM AIX 5.3 does not properly verify the status of file descriptors before setuid execution, which allows local users to gain privileges by closing file…
    cvelistv5