CVE-2007-0393

CVE-2007-0393 concerns Sun Solaris 9 where the system does not properly verify the status of file descriptors before setuid execution, enabling local privilege escalation by closing fd 0, 1, or 2 and then running a setuid program. The vulnerability is described as a variant of CVE-2002-0572. Conn...