FreeBSD -- sendmail improper close-on-exec flag handling
There is a programming error in sendmail(8) that prevented
open file descriptors have close-on-exec properly set.
Consequently a subprocess will be able to access all open
files that the parent process have open.
A local user who can execute their own program for mail
delivery will be able to interfere with an open SMTP
Copyright © 2003-2005 Jacques Vidrine and contributors.
Please see the source of this document for full copyright