Unchecked race conditions under file decriptors leaves ability to modify /etc/passwd.
vulners.com/securityvulns/securityvulns:doc:3296