Vulnerability in Freebsd

CVE-2001-1180

FreeBSD 4.3 does not properly clear shared signal handlers when executing a process, which allows local users to gain privileges by calling rfork with a shared signal handler, having the child process execute a setuid program, and sending a signal to the child.

EPSS: 0.006 (44.9th percentile) — read the EPSS interpretation.

Affected products

  • Freebsd — versions 4.0, 4.1, 4.2
  • N/a — versions n/a

References

  • cve@mitre.org (government-resource, x_refsource_CIAC, third-party-advisory)
  • cve@mitre.org (vdb-entry, x_refsource_XF)
  • cve@mitre.org (x_refsource_OSVDB, vdb-entry)
  • cve@mitre.org (Vendor Advisory, mailing-list, Exploit, x_refsource_BUGTRAQ, Patch)
  • cve@mitre.org (US Government Resource, x_refsource_CERT-VN, Patch, Third Party Advisory, third-party-advisory)
  • cve@mitre.org (Exploit, Patch, vdb-entry, x_refsource_BID, Vendor Advisory)