VULHUB ™

A vulnerability exists in the FreeBSD exec() implementation. The system call fails to prevent signal handlers from being inherited by processes attempting to exec setuid images. As a result, setuid processes may end up with user-supplied signal handlers set. Attackers may be able to execute arbitrary code with elevated privileges by setting a signal handler for a setuid process.

A vulnerability exists in the FreeBSD exec() implementation. The system call fails to prevent signal handlers from being inherited by processes attempting to exec setuid images. As a result, setuid processes may end up with user-supplied signal handlers set. Attackers may be able to execute arbitrary code with elevated privileges by setting a signal handler for a setuid process.