|
FreeBSD exec() Inherited Signal Handler Vulnerability
A vulnerability exists in the FreeBSD exec() implementation. The system call fails to prevent signal handlers from being inherited by processes attempting to exec setuid images. As a result, setuid processes may end up with user-supplied signal handlers set. Attackers may be able to execute arbitrary code with elevated privileges by setting a signal handler for a setuid process. |
|
|
Privacy Statement |
