// back  Apache HTTPD suEXEC Multiple Vulnerabilities    The
suexec binary is a helper application which is part of the
Apache HTTP server package. It is designed to allow a script to
run with the privileges of the owner of the script instead the
privileges of the server. More information about the suexec
utility can be found at the following URL.    Local exploitation
of multiple vulnerabilities within Apache Software Foundation's
suexec utility could allow an attacker to execute arbitrary code
as another user.  1) Path Checking Race Condition
Vulnerabilities  One race condition occurs between the obtaining
the current directory and changing to that directory. Another
race condition occurs between changing to a directory and
checking that the directory is not a link. The directory
structure may change between each of these operations, which can
lead to the lstat() being performed on an arbitrary directory
chosen by an attacker. These may be exploited with by renaming a
parent directory, or by using symbolic