Unscored CVE-2007-0394 EUVD-2007-0396GHSA-jcmg-xqwv-44cm

HP HP-UX B11.11 does not properly verify the status of file descriptors before setuid execution, which allows local users to gain privilege…

Published Jan 19, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

HP HP-UX B11.11 does not properly verify the status of file descriptors before setuid execution, which allows local users to gain privileges by closing file descriptor 0, 1, or 2 and then invoking a setuid program, a variant of CVE-2002-0572.

References

20070118 Multiple OS kernel insecure handling of stdio file descriptor mailing-list
20070118 Re: Multiple OS kernel insecure handling of stdio file descriptor mailing-list