• info
• discussion
• exploit
• solution
• references

FreeBSD 'sendfile(2)' Write-Only File Permission Security Bypass Vulnerability

To exploit this issue, an attacker would only need to create a program that invokes the 'sendfile(2)' system call.