CVE-2001-1180: Freebsd

High severity, CVSS 7.2. EPSS: 0.6% chance of exploitation in the next 30 days.

FreeBSD 4.3 does not properly clear shared signal handlers when executing a process, which allows local users to gain privileges by calling rfork with a shared signal handler, having the child process execute a setuid program, and sending a signal to the child.

Affected products

• Freebsd Freebsd: version 4.0 only; version 4.1 only; version 4.2 only; version 4.3 only

Published 2001-07-10. Last modified 2026-06-16.