CVE-2007-0393

CVE-2007-0393 describes a privilege escalation vulnerability in Sun Solaris 9, where local users can gain elevated privileges. This occurs because the operating system fails to properly verify file descriptor status before executing setuid programs, allowing an attacker to close file descriptors 0, 1, or 2 and then invoke a setuid program. The vulnerability has a CVSS score of 4.6, indicating a low severity with local access and low attack complexity, potentially leading to partial confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage, suggesting it is not a widely exploited or discussed threat.