Unscored CVE-2007-0392 EUVD-2007-0394GHSA-xm7m-3vrw-5x97

IBM AIX 5.3 does not properly verify the status of file descriptors before setuid execution, which allows local users to gain privileges by…

Published Jan 19, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

IBM AIX 5.3 does not properly verify the status of file descriptors before setuid execution, which allows local users to gain privileges by closing file descriptor 0, 1, or 2 and then invoking a setuid program, a variant of CVE-2002-0572.

References

20070118 Multiple OS kernel insecure handling of stdio file descriptor mailing-list
20070118 Re: Multiple OS kernel insecure handling of stdio file descriptor mailing-list