{"id":"CVE-2007-0394","published":"2007-01-19T23:00:00Z","modified":"2024-08-07T12:19:30Z","title":"HP HP-UX B11.11 does not properly verify the status of file descriptors before setuid execution, which allows local…","vendor":null,"product":null,"tier":"tail","description":{"text":"HP HP-UX B11.11 does not properly verify the status of file descriptors before setuid execution, which allows local users to gain privileges by closing file descriptor 0, 1, or 2 and then invoking a setuid program, a variant of CVE-2002-0572.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.00562,"percentile":0.46617,"provenance":"source"},"cwes":[],"references":[{"url":"http://www.securityfocus.com/archive/1/457279/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ"]},{"url":"http://www.securityfocus.com/archive/1/457315/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ"]}],"priority":{"score":9.3,"factors":[{"name":"EPSS percentile","points":9.32}]},"euvd":{"id":"EUVD-2007-0396","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-cve-2002-0572-family-cve-2002-0572","parents":[{"from":"CVE-2002-0572","to":"CVE-2007-0394","relation":"variant","confidence":"high","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"variant","quote":"…P-UX B11.11 does not properly verify the status of file descriptors before setuid execution, which allows local users to gain privileges by closing file descriptor 0, 1, or 2 and then invoking a setuid program, a variant of CVE-2002-0572.","from":"CVE.org","in":"CVE-2007-0394"}]}]}}