CVE-2007-0393

MEDIUM · CVSS 4.6 EPSS 0.34%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2007-01-19 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2007-0393

Severity

MEDIUM

CVSS

4.6

EPSS

0.34%

Original NVD Description

Sun Solaris 9 does not properly verify the status of file descriptors before setuid execution, which allows local users to gain privileges by closing file descriptor 0, 1, or 2 and then invoking a setuid program, a variant of CVE-2002-0572.