Vulnerability in Hp Hp-Ux

CVE-2007-0394

HP HP-UX B11.11 does not properly verify the status of file descriptors before setuid execution, which allows local users to gain privileges by closing file descriptor 0, 1, or 2 and then invoking a setuid program, a variant of CVE-2002-0572.

EPSS: 0.005 (42.1th percentile) — read the EPSS interpretation.

Affected products

  • Hp Hp-ux — versions 11.11
  • N/a — versions n/a

References