Description
FreeBSD 4.3 does not properly clear shared signal handlers when executing a process, which allows local users to gain privileges by calling rfork with a shared signal handler, having the child process execute a setuid program, and sending a signal to the child.
References
- L-111 third-party-advisory government-resource
- bsd-rfork-signal-handlers(6829) vdb-entry
- 1897 vdb-entry
- 20010710 FreeBSD 4.3 local root, yet Linux and *BSD much better than Windows mailing-list
- VU#943633 third-party-advisory
- 3007 vdb-entry