{"id":"CVE-2007-0392","published":"2007-01-19T23:00:00Z","modified":"2024-08-07T12:19:29Z","title":"IBM AIX 5.3 does not properly verify the status of file descriptors before setuid execution, which allows local users…","vendor":null,"product":null,"tier":"tail","description":{"text":"IBM AIX 5.3 does not properly verify the status of file descriptors before setuid execution, which allows local users to gain privileges by closing file descriptor 0, 1, or 2 and then invoking a setuid program, a variant of CVE-2002-0572.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.00359,"percentile":0.29615,"provenance":"source"},"cwes":[],"references":[{"url":"http://www.securityfocus.com/archive/1/457279/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ"]},{"url":"http://www.securityfocus.com/archive/1/457315/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ"]}],"priority":{"score":5.9,"factors":[{"name":"EPSS percentile","points":5.92}]},"euvd":{"id":"EUVD-2007-0394","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-cve-2002-0572-family-cve-2002-0572","parents":[{"from":"CVE-2002-0572","to":"CVE-2007-0392","relation":"variant","confidence":"high","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"variant","quote":"IBM AIX 5.3 does not properly verify the status of file descriptors before setuid execution, which allows local users to gain privileges by closing file descriptor 0, 1, or 2 and then invoking a setuid program, a variant of CVE-2002-0572.","from":"CVE.org","in":"CVE-2007-0392"}]}]}}