Vulnerability in Ibm Aix

CVE-2007-0392

IBM AIX 5.3 does not properly verify the status of file descriptors before setuid execution, which allows local users to gain privileges by closing file descriptor 0, 1, or 2 and then invoking a setuid program, a variant of CVE-2002-0572.

EPSS: 0.003 (26.9th percentile) — read the EPSS interpretation.

Affected products

  • Ibm Aix — versions 5.3
  • N/a — versions n/a

References