FreeBSD 4.5 and earlier, and possibly other BSD-based operating systems, allows local users to write to or read from restricted files by closing the file descriptors 0 (standard input), 1 (standard output), or 2 (standard error), which may then be reused by a called setuid process that intended to perform I/O on normal files.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Freebsd | Freebsd | 4.4-releng (including) | 4.4-releng (including) |
| Freebsd | Freebsd | 4.5-release (including) | 4.5-release (including) |
| Freebsd | Freebsd | 4.5-stable (including) | 4.5-stable (including) |
| Openbsd | Openbsd | 2.0 (including) | 2.0 (including) |
| Openbsd | Openbsd | 2.1 (including) | 2.1 (including) |
| Openbsd | Openbsd | 2.2 (including) | 2.2 (including) |
| Openbsd | Openbsd | 2.3 (including) | 2.3 (including) |
| Solaris | Sun | 2.5.1 (including) | 2.5.1 (including) |
| Solaris | Sun | 2.6 (including) | 2.6 (including) |
| Solaris | Sun | 7.0 (including) | 7.0 (including) |
| Solaris | Sun | 8.0 (including) | 8.0 (including) |
| Sunos | Sun | - (including) | - (including) |
| Sunos | Sun | 5.5.1 (including) | 5.5.1 (including) |
| Sunos | Sun | 5.7 (including) | 5.7 (including) |
| Sunos | Sun | 5.8 (including) | 5.8 (including) |