Vulnerability Database

310,057

Total vulnerabilities in the database

CVE-2007-0392

IBM AIX 5.3 does not properly verify the status of file descriptors before setuid execution, which allows local users to gain privileges by closing file descriptor 0, 1, or 2 and then invoking a setuid program, a variant of CVE-2002-0572.

  • Published: Jan 19, 2007
  • Updated: Nov 9, 2025
  • CVE: CVE-2007-0392
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 4.6
  • AV:L/AC:L/Au:N/C:P/I:P/A:P

No CWE or OWASP classifications available.

Software From Fixed in
ibm / aix 5.3 5.3.x