Privileges are not dropped on executing program specified by user.
vulners.com/securityvulns/securityvulns:doc:6700