CVE-2007-0392: Medium severity IBM AIX vulnerability
Published Jan 19, 2007
·Updated
IBM AIX 5.3 does not properly verify the status of file descriptors before setuid execution, which allows local users to gain privileges by closing file descriptor 0, 1, or 2 and then invoking a setuid program, a variant of CVE-2002-0572.
Affected Software
1 affected component
IBM AIX=5.3
Event History
Jan 19, 2007
CVE Published
11:28 PM
Jan 20, 2007
CVE Published
via MITRE·04:00 AM
Data Sourced
via MITRE·04:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-0392?
CVE-2007-0392 has a medium severity rating as it allows local users to escalate their privileges.
2
Who is affected by CVE-2007-0392?
CVE-2007-0392 affects users of IBM AIX version 5.3.
3
How do I fix CVE-2007-0392?
To fix CVE-2007-0392, apply the latest security patches provided by IBM for AIX 5.3.
4
What can an attacker do with CVE-2007-0392?
An attacker can potentially gain elevated privileges by exploiting CVE-2007-0392 through manipulation of file descriptors.
5
Is CVE-2007-0392 a remote or local vulnerability?
CVE-2007-0392 is a local vulnerability that requires access to the affected system to exploit.