Unscored CVE-2007-0393 EUVD-2007-0395GHSA-pqq7-42hf-m9r8

Sun Solaris 9 does not properly verify the status of file descriptors before setuid execution, which allows local users to gain privileges …

Published Jan 19, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

Sun Solaris 9 does not properly verify the status of file descriptors before setuid execution, which allows local users to gain privileges by closing file descriptor 0, 1, or 2 and then invoking a setuid program, a variant of CVE-2002-0572.

References

20070118 Multiple OS kernel insecure handling of stdio file descriptor mailing-list
20070118 Re: Multiple OS kernel insecure handling of stdio file descriptor mailing-list