ld.so in FreeBSD, NetBSD, and possibly other BSD distributions does not remove certain harmful environment variables, which allows local users to gain privileges by passing certain environment variables to loading processes. NOTE: this issue has been disputed by a third party, stating that it is the responsibility of the application to properly sanitize the environment
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Netbsd | Netbsd | 2.0.4 | 2.0.4 |
| Freebsd | Freebsd | 6.2 | 6.2 |