CVE-2007-0392
IBM AIX 5.3 - Privilege Escalation via File Descriptor Manipulation
Title source: llmDescription
IBM AIX 5.3 does not properly verify the status of file descriptors before setuid execution, which allows local users to gain privileges by closing file descriptor 0, 1, or 2 and then invoking a setuid program, a variant of CVE-2002-0572.
References (2)
Core 2
Core References
Third Party Advisory, VDB Entry mailing-list
x_refsource_bugtraq
http://www.securityfocus.com/archive/1/457279/100/0/threaded
Third Party Advisory, VDB Entry mailing-list
x_refsource_bugtraq
http://www.securityfocus.com/archive/1/457315/100/0/threaded
Scores
EPSS
0.0034
EPSS Percentile
26.9%
Details
Status
published
Products (1)
ibm/aix
5.3
Published
Jan 19, 2007
Tracked Since
Feb 18, 2026