Unscored severity · published Jan 19, 2007
CVE-2007-0392
IBM AIX 5.3 does not properly verify the status of file descriptors before setuid execution, which allows local users to gain privileges by closing file descriptor 0, 1, or 2 and…
–
CVSS
0.4%
EPSS
No
On KEV
Description
IBM AIX 5.3 does not properly verify the status of file descriptors before setuid execution, which allows local users to gain privileges by closing file descriptor 0, 1, or 2 and then invoking a setuid program, a variant of CVE-2002-0572.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 30% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AI
Aix · Ibm
5.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-0392
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-0392
www.securityfocus.com
http://www.securityfocus.com/archive/1/457279/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/archive/1/457315/100/0/threaded
More from Aix
10.0
CVE-2024-56346
IBM AIX command execution
9.9
CVE-2026-18835
Vulnerabilities in IBM AIX and PowerVM VIOS
9.9
CVE-2026-16816
Vulnerabilities in IBM AIX and PowerVM VIOS
9.9
CVE-2026-15068
Vulnerabilities in IBM AIX and PowerVM VIOS
9.8
CVE-2026-19437
Vulnerabilities in IBM AIX and PowerVM VIOS