CVE-2007-0393: Medium severity Sun Solaris vulnerability

Published Jan 19, 2007

Updated

Sun Solaris 9 does not properly verify the status of file descriptors before setuid execution, which allows local users to gain privileges by closing file descriptor 0, 1, or 2 and then invoking a setuid program, a variant of CVE-2002-0572.

Affected Software

1 affected component

Sun Solaris=9.0

Event History

Jan 19, 2007

CVE Published

11:28 PM

Jan 20, 2007

CVE Published

via MITRE·04:00 AM

Data Sourced

via MITRE·04:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-0393?

CVE-2007-0393 has a medium severity rating due to the potential privilege escalation it allows for local users.

How do I fix CVE-2007-0393?

To fix CVE-2007-0393, ensure that systems running Solaris 9 are updated with the latest patches that address this vulnerability.

Who is affected by CVE-2007-0393?

CVE-2007-0393 affects local users of Sun Solaris 9 who can exploit the improper verification of file descriptors.

What type of vulnerability is CVE-2007-0393?

CVE-2007-0393 is a privilege escalation vulnerability related to improper handling of file descriptors during setuid execution.

When was CVE-2007-0393 published?

CVE-2007-0393 was published in January 2007.