CVE-2007-0392

Published: Jan 19, 2007Modified: Apr 23, 2026

4.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

IBM AIX 5.3 does not properly verify the status of file descriptors before setuid execution, which allows local users to gain privileges by closing file descriptor 0, 1, or 2 and then invoking a setuid program, a variant of CVE-2002-0572.

Affected (1)

Products: Ibm: Aix

Ibm

1 product

Aix

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Ibm Aix	Version 5.3

References (4)

http://www.securityfocus.com/archive/1/457279/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/457315/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/457279/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/457315/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.