Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2001-1180: FreeBSD 4.3 allows local user to gain extra privileges

CVE-2001-1180 · published 25 years ago

Summary

In FreeBSD version 4.3, the system does not properly remove shared signal handlers when a program is started. This lets a regular user run a special command that can keep a privileged signal handler active, then start a setuid program and use the signal to obtain higher rights. Apply the latest FreeBSD patches or upgrade to a newer release that fixes this behavior.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
freebsd	freebsd	4.0 4.1 4.2 4.3 `cpe:2.3:o:freebsd:freebsd:4.0:::::::*`

Original advisory text

FreeBSD 4.3 does not properly clear shared signal handlers when executing a process, which allows local users to gain privileges by calling rfork with a shared signal handler, having the child proc...

References

http://archives.neohapsis.com/archives/bugtraq/2001-07/0179.html Exploit Patch Vendor Advisory
http://ciac.llnl.gov/ciac/bulletins/l-111.shtml
http://www.osvdb.org/1897
http://www.kb.cert.org/vuls/id/943633 Patch Third Party Advisory US Government Resource
http://www.securityfocus.com/bid/3007 Exploit Patch Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6829

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker full control (estimated)

Severity

7.2 High

Exploitation

<1% chance of attack within 30 days

Timeline

Published10 Jul 2001

Updated4 Nov 2026

First seen29 Sep 2026

Sources

CVE-2001-1180 · NVD

Track software like this

Free during beta