Описание
IBM AIX 5.3 does not properly verify the status of file descriptors before setuid execution, which allows local users to gain privileges by closing file descriptor 0, 1, or 2 and then invoking a setuid program, a variant of CVE-2002-0572.
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*
EPSS
Процентиль: 27%
0.00343
Низкий
4.6 Medium
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
больше 4 лет назад
IBM AIX 5.3 does not properly verify the status of file descriptors before setuid execution, which allows local users to gain privileges by closing file descriptor 0, 1, or 2 and then invoking a setuid program, a variant of CVE-2002-0572.
EPSS
Процентиль: 27%
0.00343
Низкий
4.6 Medium
CVSS2
Дефекты
NVD-CWE-Other