FreeBSD exec() Inherited Signal Handler Vulnerability

A vulnerability exists in the FreeBSD exec() implementation. The system call fails to prevent signal handlers from being inherited by processes attempting to exec setuid images. As a result, setuid processes may end up with user-supplied signal handlers set.

Attackers may be able to execute arbitrary code with elevated privileges by setting a signal handler for a setuid process.


Privacy Statement
Copyright 2010, SecurityFocus